Pension mechanism tip of the iceberg, at least 300 places in the invasion already, even in the cloud business to news organizations - internet.watch.impress.co.jp

Kaspersky Lab reported on the "Blue Termite" APT (linked to "CloudyOmega") targeting Japan-wide sectors — government, energy, defense, media, manufacturing, research and cloud providers — with spear-phishing .exe payloads that display fake Word documents, establish C2 communications, deploy backdoors and credential-stealing tools (including Mimikatz), and are suspected of gaining administrative access on some cloud-hosted services; at least 300 unique IPs/locations were observed, the report provides IOCs, Kaspersky detection names, and recommended defensive measures.