Taidoor__2019__taidoor_analysis_jp.pdf

NTT Security Japan presents a whitepaper on a Taidoor-based targeted attack affecting Japanese organizations since 2017, describing the infection chain (spearphishing email delivering a downloader, memory-resident Taidoor), C2 communications using Google Cloud Platform and other services, deployment of persistent backdoors (PoshC2 and SERKDES), and extraction of command outputs, with IOC appendix and comparisons to prior Taidoor variants to inform defense and detection efforts.