Operation Diplomatic Specter is a cyber espionage campaign that emerged in late 2022, initially tracked by Palo Alto Networks as CL-STA-0043 and later as TGR-STA-0043 before the actor behind it was formally named Phantom Taurus. This Chinese state-aligned threat group focuses on intelligence collection, specifically targeting sensitive information related to military operations, diplomatic missions, embassies, and foreign affairs ministries. The group distinguishes itself through the use of rare email exfiltration techniques against compromised servers and the deployment of unique, custom-built backdoors like TunnelSpecter and SweetSpecter, along with in-memory VBScript implants. Its operations are characterized by an adaptive approach to evade detection, often adjusting tactics to circumvent mitigation efforts.

Actores similares

Operation Wocaoapt · 1influence-operationsactor · 1Operation Ghostwriterapt · 0Operation C-Majorapt · 0Operation Silent Skimmerapt · 0Operation Cobalt Whisperapt · 0Operation RusticWebapt · 0Operation LiberalFaceapt · 0Operation Olympic Gamesapt · 0Operation SalmonSlalomapt · 0