AS-23-Chen-Operation-Clairvoyance-How-APT-Groups-Spy-on-the-Media-Industry.pdf (4 MB)

TeamT5’s Operation Clairvoyance presentation is primarily a broad study of APT espionage against media organizations, with detailed case material on Taiwan-focused and China-nexus activity. The DPRK-relevant evidence in the provided excerpt is limited to an overview noting media-targeting activity against South Korea, Japan, and the United States using phishing, BabyShark, and AFMail, plus a reference to Mandiant reporting on North Korea’s UNC2970/LIGHTSHOW activity. The source excerpt supports treating this as contextual DPRK-relevant media-sector tradecraft rather than a report wholly about North Korean operations. Its more detailed visible sections describe non-DPRK tooling such as BlackTech/PLEAD, KeyPlug, Bifrost/Waterbear, Dropbox abuse, reverse shells, and a Taiwanese media web-server compromise.