Home > List all groups > Operation RestyLink

Threat Group Cards: A Threat Actor Encyclopedia

Names	Operation RestyLink (NTT) Operation Enelink (?) Earth Yako (Trend Micro)
Country	[Unknown]
Motivation	Information theft and espionage
First seen	2021
Description	(NTT) Our SOC observed APT campaign targeting Japanese companies starting from mid of April 2022. We think that this campaign had already started in March 2022 and related attack might have performed around October 2021. It implies that this campaign is not temporary nor intensive, and it could continue from here forward.
Observed	Countries: Japan.
Tools used
Information	<https://insight-jp.nttsecurity.com/post/102hojk/operation-restylink-apt-campaign-targeting-japanese-companies>

Last change to this card: 17 February 2023

Download this actor card in PDF or JSON format