TempTick is a China-nexus cyber espionage group targeting defense, finance, and technology sectors in South Korea and Japan.
Analyst brief
TempTick is a China-nexus nation-state cyber espionage group. It targets government and private sector organizations in South Korea and Japan, specifically within finance, defense, aerospace, technology, healthcare, automotive, and media sectors. Their TTPs likely involve targeted phishing and maintaining persistent network access via C2 infrastructure for intelligence collection. Defenders should prioritize monitoring for espionage campaigns tied to East Asian geopolitical events and enhance anomaly detection across government and critical industry networks.
TempTick
nation-state
This threat actor targets organizations in the finance, defense, aerospace, technology, health-care, and automotive sectors and media organizations in East Asia for the purpose of espionage. Believed to be responsible for the targeting of South Korean actors prior to the meeting of Donald J. Trump and Kim Jong-un
origin (suspected)
🇨🇳China· state-sponsoredattribution confidence: medium (50)