News & Press

Taipei / FIRSTCON, June 14, 2026 — TeamT5, a leading threat intelligence company, today delivered a presentation at the FIRSTCON on June 16, one of the world’s premier incident response and cybersecurity events. The session focused on cybercrime campaigns leveraging short-video platforms and cryptocurrency applications. TeamT5 also showcased its latest ThreatVision Cybercrime Intelligence offering, aimed at helping organizations stay ahead of threats and reduce potential financial and reputational damage. TeamT5 Experts Analyze Emerging Cybercrime Tactics Telegram has emerged as a major hub in the underground cybercrime ecosystem. In TeamT5’s talk, we will present firsthand observations from our analysis of how malware is advertised and sold in Chinese Telegram channels. As short‑video platforms and cryptocurrency apps gain popularity, we’ve seen threat actors increasingly exploit these trends to trick users into installing malicious software. We will share two recent campaigns — one aimed at users in China and Malaysia, and another targeting South Korea — both of which distribute trojanized APKs masquerading as legitimate apps. By examining these operations, we aim to clarify how threat actors function in these regions and how they leverage trusted platforms to broaden their reach. From Cybercrime to APT Threats: Anticipating Attack Risks with ThreatVision Cybercrime is one of the most serious challenges facing the global digital economy. Many organizations remain constrained by the final stages of the Cyber Kill Chain, responding only after alerts are triggered. Built on TeamT5’s long-term threat research, ThreatVision Cybercrime Intelligence tracks criminal communities, ransomware activity, attack tools, and relevant APT-related infrastructure, techniques, and targeting shifts. It helps organizations identify risk signals earlier and support intelligence-driven defense planning. ThreatVision monitors high-risk activity across the Deep & Dark Web, Telegram, criminal communities, and other underground sources. By analyzing ransomware activity, data leaks, criminal services, adversary behavior, and APT-related context where relevant, it turns fragmented signals into intelligence for risk assessment, threat hunting, incident investigation, and response planning. Deep & Dark Web and Cybercrime Community Monitoring : Tracks high-risk underground activity to identify operational risk signals and potential APT-related links . Intelligence Analysis and IoC Extraction : Turns cybercrime activity into contextual intelligence and actionable IoCs for investigation, response, and remediation. Understanding Criminal Community Dynamics: ThreatVision Cybercrime Intelligence Enables Proactive Defense Criminal communities, ransomware groups, and APT operations do not always have clear boundaries. Similar tools, infrastructure, or techniques may appear across operations with different objectives. ThreatVision Cybercrime Intelligence helps organizations connect these signals, track ransomware activity, data leaks, attack tools, and criminal ecosystem dynamics, and turn them into intelligence for risk assessment and defense planning. Expert In-depth Analysis : Provides context and supporting evidence beyond standard alerts. Adversary Profiling : Profiles ransomware groups and criminal ecosystems. Attack Techniques and Tactics : Tracks attack tools, technique changes, and target selection. Intelligence-driven Decision Making : Connects intelligence to operational risk and strategy development. With ThreatVision Cybercrime Intelligence, organizations can identify risk signals earlier, guide defensive resources, accelerate investigations and threat hunting, and strengthen long-term cyber resilience. About TeamT5 TeamT5 is a threat intelligence research team focused on the Asia-Pacific region. Leveraging Taiwan’s geographic position, language capabilities, and over two decades of research experience, TeamT5 specializes in the analysis of major threats such as APT activity and ransomware, providing regionally grounded threat intelligence to government, financial, and technology sectors. With research at its core, TeamT5 continuously tracks the evolution of threat behavior and attack techniques, organizing complex activity into clear risk context. By monitoring both emerging and unknown threats and analyzing attacker behavior, TeamT5 helps organizations identify risks earlier, reduce exposure time, and strengthen preparedness. Research findings are shared across international security forums, while long-term partnerships are built on trust and practical collaboration. Media Inquiries & Business Partnerships : [email protected]

For nearly two decades, TeamT5 has been deeply rooted in the Asia-Pacific region—researching threat actors, tracking attack campaigns, and uncovering overlooked risks and signals. Today, we officially unveil TeamT5’s new brand identity. This transformation is more than a visual update; it is a definitive signal of our identity, our values, and our global trajectory. A Threat Intelligence Pioneer Rooted in Asia-Pacific TeamT5 is a threat intelligence pioneer born in Asia. Based in Taiwan, we leverage an unique geopolitical perspective and deep linguistic expertise to track Advanced Persistent Threats (APTs) and ransomware activity across the region. We provide more than just data to government agencies, financial institutions, and technology leaders ; we deliver actionable insights grounded in regional context—intelligence that organizations can immediately deploy in high-stakes environments. This rebranding does not change our direction. Instead, it is the purest expression of the mission we have upheld from the start: Transforming complex threats into decisive action. The Evolution: From Technical Roots to Global Trusted Partner TeamT5’s mission has always been clear, though never simple: Transform complex threats into actionable intelligence that enables organizations to move from reactive defense to smarter detection and response. As threats evolve faster and become harder to track and interpret, the value of intelligence cannot stop at simply telling organizations what has happened. This moment marks a pivotal step forward: A Mature Identity : We have evolved from a technical startup into a professional, trusted enterprise brand. Global Unity : We are establishing a unified presence as we expand our long-term footprint in international markets. Operational Focus : Our new visual identity reflects how we operate—remaining alert as threats evolve, acting swiftly in critical moments, and staying sharply focused on what truly matters. The concept of our new logo - The Spotlight: Sharpen the Sight. It symbolizes our role in the ecosystem. We are not defenders standing passively under the spotlight. Instead, we are intelligence hunters who precisely locate threats in the shadows, operating at the boundary between the visible and the unseen. Our goal is not to illuminate everything. Rather, we focus on the signals that truly matter—so our customers can see more clearly, assess risks confidently, and act decisively. Our Core Values: Threat Intelligence that Powers Proactive Defense We believe the value of threat intelligence lies not in the volume of information, but in whether it enables organizations to identify critical signals earlier. TeamT5’s vision is to become the most trusted threat intelligence partner in the Asia-Pacific region , helping organizations move from responding to attacks toward anticipating threats . Behind this vision are the four core values that have long guided TeamT5. These values are not just principles—they shape how we conduct research, build products, and collaborate with partners. Continuous Exploration We never stop exploring. Beyond monitoring known threats, we actively venture into the unknown—uncovering overlooked signals in complex threat landscapes and revealing emerging attack patterns and techniques. Precise Insight Precision is the foundation of proactive defense. We do more than track indicators—we analyze the logic behind threats so that intelligence can truly support critical decision-making. Agile Action Speed is essential when facing cyber threats. We track every step of the attacker, enabling action before threats escalate and transforming intelligence into real-time protection. Trusted Collaboration Threat intelligence becomes stronger when shared. Through open knowledge exchange and two-way communication, we build long-term partnerships with customers and collaborators based on trust—standing together against evolving threats. Continuing the Journey of Exploration TeamT5 is both an explorer and an innovator in threat intelligence. We lead the discovery of emerging threats, deconstruct adversary behavior, and build defensive capabilities that evolve as quickly as our adversaries. This rebranding represents our continued commitment to exploration, insight, action, and collaboration . It also reaffirms our belief: When intelligence is done right, organizations gain the advantage in cyber defense. TeamT5’s founding mission remains unchanged— more precise intelligence, earlier action. We are ready. The next chapter starts now.

From threat detection to risk management and prevention, ThreatSonar Plus empowers enterprises to navigate the AI era Facing increasingly stealthy attacks driven by AI agents, traditional cybersecurity defenses are no longer sufficient. TeamT5, a leading threat intelligence provider in the Asia-Pacific region, today unveiled a new solution at CYBERSEC 2026 in Taiwan: ThreatSonar Plus , a ThreatSonar Plus Extensive Endpoint Assessment Platform built for AI environments. In addition to showcasing its advanced automated defense capabilities, TeamT5 also introduced its new brand identity, marking both a commitment to deep technological innovation and a milestone in its global expansion in AI cybersecurity. ThreatSonar Plus Eliminates Blind Spots in AI Agent Defense As enterprises accelerate the adoption of AI agents to drive automation, new forms of cybersecurity risk are emerging. Sung-ting Tsai, CEO of TeamT5, noted that improperly configured AI agents may lead to sensitive data leakage or exposure to malicious code injection. Given that AI agents often integrate with external services, insufficient access control can easily result in unauthorized access to confidential data. These threats are highly automated and difficult to detect, rendering traditional cybersecurity solutions ineffective. Enterprises must urgently reassess and establish protection mechanisms specifically designed for AI deployments. The newly launched ThreatSonar Plus platform directly addresses these defense gaps in AI environments. Built around three core pillars—asset inventory, risk detection, and AI agent identification—the platform enables enterprises to gain precise visibility into critical assets and AI deployments. Through in-depth analysis, administrators can quickly identify high-risk vulnerabilities and prioritize remediation strategies accordingly. Key features of ThreatSonar Plus include: AI agent risk identification, including sensitive data exposure, malicious commands, and autonomous agent behaviors Support for SEMI E187 to meet industry security and compliance requirements Rapid identification of high-risk vulnerabilities with severity-based prioritization for faster response System configuration assessment aligned with CIS benchmarks, with actionable hardening recommendations New ThreatVision Cybercrime Intelligence Reports Focus on Dark Web Cybercrime In addition to endpoint security, TeamT5 has recently introduced ThreatVision Cybercrime Intelligence. Built on TeamT5’s 20+ years of APAC threat research, it covers the Deep & Dark Web, underground forums, Telegram, and cybercrime communities, delivering expert-validated intelligence insights that analyze cybercrime operations, ransomware activity, data trades, and dark web developments from attacker’s perspective. ThreatVision Cybercrime Intelligence helps enterprises identify emerging cybercrime risks earlier, understand attacker tactics and targets, and prioritize defensive actions. By gaining visibility into cybercriminal activity across the Deep & Dark Web, enterprises can more accurately assess risk and shift from reactive response to proactive defense. From Asia-Pacific to Global Markets: Brand Transformation Signals Strategic Vision Another highlight was the debut of TeamT5’s new brand identity. Built on the concept of “focus insights and sharpened vision,” the redesign reflects its precision in threat detection and ability to help clients make decisive security decisions. CEO Sung-Ting Tsai said the rebrand marks TeamT5’s evolution into a more mature and trusted cybersecurity company, while reinforcing its global expansion strategy. Founded in Taiwan, TeamT5 has established a strong foothold in Japan and South Korea, and in recent years has expanded into Southeast Asia, including Thailand, Vietnam, Malaysia, and Singapore, with further extension into European markets. As its global footprint grows, the company continues to strengthen local partnerships and service capabilities to enhance competitiveness. TeamT5 has also initiated plans for a public offering, progressing according to schedule to support future capital market entry and long-term brand sustainability. About TeamT5 Founded in 2017, TeamT5 is a leading provider of cybersecurity threat intelligence and endpoint security solutions in the Asia-Pacific region. The company specializes in regional cyber threat research, including advanced persistent threats (APT) and ransomware. Leveraging high-precision threat intelligence and proprietary endpoint threat hunting technologies, TeamT5 delivers comprehensive security solutions to counter cyber espionage and ransomware attacks. In 2022, TeamT5 received strategic investments from JAFCO Group, ITOCHU Corporation, and MACNICA, demonstrating strong international growth potential. The company was also recognized by Frost & Sullivan as the Best Threat Intelligence Company in Taiwan for two consecutive years (2023–2024).

Taipei, Oct 21, 2026 — TeamT5, a leading cyber threat intelligence provider with deep expertise in Asia-Pacific threat actors, today announced that it is a data partner of Ardence, TRM Labs’ new AI investigation platform. Through the collaboration, TeamT5 brings ThreatVision intelligence into Ardence, expanding the ways its regional threat research can support complex investigations. ThreatVision is built on TeamT5’s continuous research into threat actors and malicious activity across the Asia-Pacific region. Its intelligence helps investigators move beyond individual technical findings to understand how observed activity may connect to known adversaries, ongoing campaigns, and the wider threat landscape. “TeamT5 has long focused on turning our APAC threat research into intelligence that helps organizations understand the threats they face,” said Sung Ting Tsai (TT), CEO of TeamT5. “Working with TRM Labs extends that expertise into AI-assisted investigations, where strong threat context can help investigators make sense of what they uncover.” Through this collaboration, TeamT5 brings the relationships embedded in ThreatVision into Ardence, helping investigators connect individual findings to known adversaries and related activity. These connections can guide investigators toward relevant leads and provide a clearer direction for what to examine next. About TeamT5 TeamT5 consists of elite cyber threat analysts specializing in Asia-Pacific threat actors. With deep regional insight and strong technical expertise, TeamT5 empowers security teams around the globe to stay ahead of sophisticated cyber threats. Trusted by government, defense, and enterprise customers, TeamT5 continues to deliver accurate, actionable threat intelligence and strategic guidance. About TRM Labs TRM Labs is the operating system for modern crimefighters, built to detect and disrupt the criminal networks that exploit frontier technologies, including cryptocurrency and AI. Combining proprietary intelligence, AI-native investigations software, and disruption network infrastructure, the platform is built for high-consequence environments where accuracy, auditability, and security are essential. TRM is trusted by 600+ government agencies and financial institutions across 75 countries to counter fraud, scams, cyber crime, child exploitation, money laundering, and sanctions evasion, among other illicit activities. Media Contact TeamT5 [email protected]

The new technology alliance connects TeamT5’s ThreatVision with Imperum’s Autonomous SOC platform, bringing threat actor intelligence, campaign context, and actionable indicators directly into security operations. Taipei, September 30, 2026 — TeamT5, a leading cyber threat intelligence provider with deep expertise in Asia-Pacific threat actors, today announced a new technology alliance with Imperum, an Autonomous SOC Platform for the Full Attack Lifecycle, to integrate ThreatVision intelligence into Imperum’s Autonomous SOC workflows. ThreatVision transforms TeamT5’s continuous threat research into actionable intelligence for security teams. Drawing on TeamT5’s extensive research into APT groups, cybercrime, malware, adversary infrastructure, IoCs, TTPs, and emerging campaigns , ThreatVision helps organizations understand not only what threats they face, but also the actors and activities behind them. Through this collaboration, Imperum will develop the connectors required to integrate TeamT5 intelligence into SOC workflows and provide AI agents that can generate on-demand threat landscape views, identify gaps in detection strategy, enrich alerts with high-quality indicators, and give analysts the context they need during investigations. For SOC teams, an individual indicator or alert rarely tells the full story. Understanding whether suspicious activity is connected to a known threat actor, campaign, malware family, or attack infrastructure can significantly change how analysts assess and prioritize an incident. This is where TeamT5’s intelligence-led approach adds value. With deep visibility into threat activity across the Asia-Pacific region, TeamT5 continuously tracks adversaries and their evolving tools, infrastructure, and tactics. Integrating these insights into Imperum brings external threat intelligence and internal security signals closer together , enabling analysts to make more informed decisions during detection and investigation. “ Security teams need intelligence that can keep pace with today’s evolving threat environment ,” said Sung Ting Tsai (TT), CEO of TeamT5 . “ By bringing ThreatVision into Imperum’s AI-driven SOC workflows, organizations can access TeamT5’s APAC threat intelligence directly where investigation and response decisions are made. This integration connects our regional research and analyst expertise with autonomous security operations, helping teams understand emerging threats in context and act faster. ” “Threat intelligence is only valuable when it becomes actionable inside the SOC,” said Senad Aruc, Founder and CEO of Imperum . “Our partnership with TeamT5 allows us to bring high-quality APAC threat intelligence directly into the workflows where analysts make decisions. By combining TeamT5’s regional intelligence expertise with Imperum’s AI agents, we can help SOC teams understand the threat landscape faster, enrich investigations with better context, and continuously improve their detection strategy.” The integration will enable organizations to apply ThreatVision intelligence across alert enrichment, threat landscape analysis, detection validation, and investigation workflows , helping SOC teams move from isolated security signals toward a broader understanding of the adversaries and campaigns relevant to their environments. About TeamT5 TeamT5 consists of elite cyber threat analysts specializing in Asia-Pacific threat actors. With deep regional insight and strong technical expertise, TeamT5 empowers security teams around the globe to stay ahead of sophisticated cyber threats. Trusted by government, defense, and enterprise customers, TeamT5 continues to deliver accurate, actionable threat intelligence and strategic guidance. About Imperum Imperum is an Autonomous SOC Platform for the Full Attack Lifecycle. Built for enterprise SOCs, MSSPs, and MDR providers, Imperum helps security teams prepare before attacks, respond during incidents, and improve after every case through coordinated AI agents, detection optimization, forensics, automation, and human-controlled response. Media Contact TeamT5 [email protected]

Taipei, Taiwan, April 24, 2026 - TeamT5, a cybersecurity company specializing in cyber threat research and intelligence analysis, and the Taiwan Network Information Center (TWNIC) announced today that they have signed a Memorandum of Understanding (MOU). Under the MOU, the two organizations will establish a threat intelligence sharing framework, integrate complementary resources and deepen collaboration to strengthen Taiwan’s overall cybersecurity resilience and support the development of the cybersecurity industry. The collaboration will cover intelligence exchange and joint research. TeamT5 will contribute expertise in advanced persistent threat (APT) research, including indicators of compromise (IOCs) and technical analysis of cybercrime activities. TWNIC will contribute DNS resolution-related data and anonymized datasets collected through honeypot mechanism, in accordance with applicable privacy, security, and internal governance requirement. Through high-quality intelligence sharing, both organizations aim to identify potential risks earlier and strengthen early warning and incident response capabilities. TeamT5 has long been dedicated to cybersecurity threat research in the Asia-Pacific region, with extensive experience in APT intelligence and malware analysis. TWNIC, as Taiwan’s national network information center and a key operator within Taiwan’s Internet infrastructure, TWNIC plays a critical role in domain name management and internet governance. By combining their respective strengths, this partnership is expected to further enhance Taiwan’s participation, visibility, and contribution within the global cybersecurity community. Sung-ting Tsai, Chief Executive Officer of TeamT5, said: “As cyber threats become increasingly sophisticated and persistent, no single organization can address them alone. Through our collaboration with TWNIC, we aim to establish a more robust intelligence exchange mechanism, transform research insights into actionable defense capabilities and help a more resilient cybersecurity environment for Taiwan. We also see this partnership as an opportunity to reinforce TeamT5’s role as a leading threat intelligence provider in the Asia-Pacific region and to expand our contribution tothe global cybersecurity landscape.” Jo-Fan YU, Managing Director and Chief Executive Officer of TWNIC, said: “As cyber threats continue to evolve, TWNIC, as a critical part of Taiwan’s Internet infrastructure, remains committed to strengthening DNS protection and advancing the collection, analysis, and application of threat intelligence. This collaboration with TeamT5 will broaden our intelligence sources and analytical depth, enabling more effective integration and use of information to detect and respond to malicious activities, and ultimately strengthen Taiwan’s overall cybersecurity resilience.” Looking ahead, TWNIC will continue to serve as a bridge connecting domestic and international cybersecurity communities, promoting collaboration and exchange to build a more stable and trustworthy internet environment for Taiwan. The two organizations will also explore additional areas of cooperation, including cybersecurity research and technical exchange, to support the long-term development of Taiwan’s cybersecurity ecosystem. TeamT5 and TWNIC Sign MOU to Strengthen Threat Intelligence Sharing and Cybersecurity Resilience in TaiwanLeft: Jo-Fan YU, Managing Director and Chief Executive Officer of TWNIC; Right: Sung-Ting Tsai, Chief Executive Officer of TeamT5. About TeamT5 TeamT5 is a threat intelligence research team focused on the Asia-Pacific region. Leveraging Taiwan’s geographic position, language capabilities, and over two decades of research experience, TeamT5 specializes in the analysis of major threats such as APT activity and ransomware, providing regionally grounded threat intelligence to government, financial, and technology sectors. With research at its core, TeamT5 continuously tracks the evolution of threat behavior and attack techniques, organizing complex activity into clear risk context. By monitoring both emerging and unknown threats and analyzing attacker behavior, TeamT5 helps organizations identify risks earlier, reduce exposure time, and strengthen preparedness. Research findings are shared across international security forums, while long-term partnerships are built on trust and practical collaboration. About TWNIC The Taiwan Network Information Center (TWNIC) is Taiwan’s national network information center, responsible for managing critical internet resources and advancing Internet governance. It plays a key role in technological development, security enhancement, and multi-stakeholder collaboration within Taiwan’s internet ecosystem. TWNIC oversees the administration of the country-code top-level domains “.tw” and “.台灣,” continuously improving registration systems, security technologies, and service mechanisms to support Taiwan’s digital development. In response to rapid technological advancements and emerging challenges such as artificial intelligence applications, cybersecurity risks, and online fraud, TWNIC actively promotes initiatives in network security, digital trust, and governance resilience. Through institutional frameworks, technical innovation, and cross-sector collaboration, TWNIC ensures the stability, integrity, and trustworthiness of the domain name space, contributing to a more reliable digital environment. Guided by principles of public interest, professional governance, and sustainable development, TWNIC is committed to building a secure, open, inclusive, and trusted digital ecosystem for Taiwan.

Ransomware attacks targeting organizations worldwide continue to surge, and Japan has become one of the regions hit hardest in recent years. At TeamT5, we have been deeply involved in tracking these threats—monitoring the evolution of attack tools, detecting suspicious activities, and helping organizations safeguard their data and critical systems. We remain on the front line of this “invisible cyber war.” Recently, TeamT5 was invited by TV Tokyo program Gaia’s Dawn (ガイアの夜明け) for an in-depth interview to share our insights on ransomware trends and our frontline threat intelligence work. You can read the full written report here: link

TeamT5 is a leading brand in delivering Asia Pacific intelligence. Our CEO Sung-Ting Tsai took Korea Boannews’s interview and share insights. Key Highlights: As Korea holds significant geopolitical and economic value, it becomes hackers’ target. Cybersecurity threats are present across all industries and government sectors. Silent attacks are more alarming than flashy ones. As our CEO says, "Security investment begins with understanding both yourself and your enemies." Read full article: Boannews

TeamT5 is a leading brand in delivering Asia Pacific intelligence. Our CTI analyst took Reuters’s interview and made comments. This is an expert of Reuters's article. Read more at Reuters . ......Targeting of semiconductors and the supply chain around them “is a persistent threat that has existed for long,” the representative said, and a “constant interest” for Chinese-related advanced hacking operators. These groups often target “peripheral suppliers or related industries,” the representative said, such as a situation in June where a China-linked hacking group identified by TeamT5 as "Amoeba" launched a phishing campaign against an unnamed chemical company that plays a critical role in the semiconductor supply chain......