APT-C-60 Cyber Attack Targets Japanese Organization

APT-C-60 targets Japanese organization with SpyGlace malware. A cyber espionage group known as APT-C-60 has been linked to a sophisticated attack on an unnamed organization in Japan, utilizing a job application-themed phishing email to deliver the SpyGlace backdoor. The attack, which occurred in August 2024, exploited a vulnerability in WPS Office and involved the use of legitimate services like Google Drive and Bitbucket to facilitate the malware’s deployment. The infection chain included a decoy document and a series of downloads that ultimately established a connection to a command-and-control server, allowing the attackers to execute commands and steal files. This incident highlights the evolving tactics employed by cybercriminals in the Asia region, particularly the use of virtual disks to bypass security measures.