New APT Group Using Custom Malware to Attack IT Industries

An Advanced Persistent Threat (APT) group named “Grayling” has been using custom malware to target organizations in Taiwan’s manufacturing, IT, and biomedical sectors, as well as a government agency in the Pacific Islands, and organizations within the US and Vietnam. This campaign began in February 2023 and persisted till May 2023. The suspected intention is intelligence gathering. Although the exact location of Grayling is unknown, the focus on Taiwan suggests a regional strategic interest.