Earth Ammit Cyberespionage Group Targets Taiwan and South Korea in Coordinated Campaigns

The Earth Ammit cyberespionage group conducted two distinct but related campaigns between 2023 and 2024, targeting various entities in Taiwan and South Korea, including the military, satellite, heavy industry, media, technology, software services, and healthcare sectors. According to cybersecurity firm Trend Micro, the first wave, named VENOM, primarily targeted software service providers. Drone supply chains were compromised via ERP systems. The technical details and real impacts of these campaigns were not specified in the article.