UAT-5918, a threat actor believed to be motivated by establishing long-term access for information theft, uses a combination of web shells and open-sourced tooling to conduct post-compromise activities to establish persistence in victim environments for information theft and credential harvesting.
First seen on blog.talosintelligence.com
Jump to article: blog.talosintelligence.com/uat-5918-targets-critical-infra-in-taiwan/