ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Home > List all groups > Operation RestyLink

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link APT group: Operation RestyLink

NamesOperation RestyLink (NTT)
Operation Enelink (?)
Earth Yako (Trend Micro)
MotivationInformation theft and espionage
First seen2021
Description(NTT) Our SOC observed APT campaign targeting Japanese companies starting from mid of April 2022. We think that this campaign had already started in March 2022 and related attack might have performed around October 2021. It implies that this campaign is not temporary nor intensive, and it could continue from here forward.
ObservedCountries: Japan.
Tools used

Last change to this card: 17 February 2023

Download this actor card in PDF or JSON format

Previous: Operation Red Signature
Next: Operation RusticWeb

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]