APT23__2020__Tropic_Trooper_s_Back_USBferry_Attack_Targets_Air-gapped_Environments_-_TrendLabs_Security_Intelligence_Blog.pdf

**Executive Summary:** Trend Micro analyzes Tropic Trooper's USBferry campaign, a long-running targeted espionage operation that uses USB-based malware, steganography, backdoors and service-based persistence to infiltrate and exfiltrate sensitive documents from air-gapped and related networks in Taiwan, the Philippines and Hong Kong; the report explains multiple USBferry variants, supporting tools, communication methods, MITRE ATT&CK mappings, and provides mitigation recommendations and IoCs.