TrendLabs Security Intelligence BlogFollowing the Trail of BlackTech’s Cyber Espionage Campaigns - TrendLabs Security Intelligence Blog

Trend Micro's analysis traces BlackTech's cyber espionage campaigns—PLEAD, Shrouded Crossbow, and Waterbear—against East Asian targets, detailing their modular malware, use of RTLO in decoy documents, shared C2 infrastructure, and suspected collaboration among campaigns. The report links multiple backdoors (PLEAD, BIFROSE, KIVARS, XBOW) and exfiltration tools like DRIGO, highlights exploited vulnerabilities, and provides defensive guidance for organizations.