ニュース・プレスリリース

Ransomware attacks targeting organizations worldwide continue to surge, and Japan has become one of the regions hit hardest in recent years. At TeamT5, we have been deeply involved in tracking these threats—monitoring the evolution of attack tools, detecting suspicious activities, and helping organizations safeguard their data and critical systems. We remain on the front line of this “invisible cyber war.” Recently, TeamT5 was invited by TV Tokyo program Gaia’s Dawn (ガイアの夜明け) for an in-depth interview to share our insights on ransomware trends and our frontline threat intelligence work. You can read the full written report here: link

Taipei / FIRSTCON, June 14, 2026 — TeamT5, a leading threat intelligence company, today delivered a presentation at the FIRSTCON on June 16, one of the world’s premier incident response and cybersecurity events. The session focused on cybercrime campaigns leveraging short-video platforms and cryptocurrency applications. TeamT5 also showcased its latest ThreatVision Cybercrime Intelligence offering, aimed at helping organizations stay ahead of threats and reduce potential financial and reputational damage. TeamT5 Experts Analyze Emerging Cybercrime Tactics Telegram has emerged as a major hub in the underground cybercrime ecosystem. In TeamT5’s talk, we will present firsthand observations from our analysis of how malware is advertised and sold in Chinese Telegram channels. As short‑video platforms and cryptocurrency apps gain popularity, we’ve seen threat actors increasingly exploit these trends to trick users into installing malicious software. We will share two recent campaigns — one aimed at users in China and Malaysia, and another targeting South Korea — both of which distribute trojanized APKs masquerading as legitimate apps. By examining these operations, we aim to clarify how threat actors function in these regions and how they leverage trusted platforms to broaden their reach. From Cybercrime to APT Threats: Anticipating Attack Risks with ThreatVision Cybercrime is one of the most serious challenges facing the global digital economy. Many organizations remain constrained by the final stages of the Cyber Kill Chain, responding only after alerts are triggered. Built on TeamT5’s long-term threat research, ThreatVision Cybercrime Intelligence tracks criminal communities, ransomware activity, attack tools, and relevant APT-related infrastructure, techniques, and targeting shifts. It helps organizations identify risk signals earlier and support intelligence-driven defense planning. ThreatVision monitors high-risk activity across the Deep & Dark Web, Telegram, criminal communities, and other underground sources. By analyzing ransomware activity, data leaks, criminal services, adversary behavior, and APT-related context where relevant, it turns fragmented signals into intelligence for risk assessment, threat hunting, incident investigation, and response planning. Deep & Dark Web and Cybercrime Community Monitoring : Tracks high-risk underground activity to identify operational risk signals and potential APT-related links . Intelligence Analysis and IoC Extraction : Turns cybercrime activity into contextual intelligence and actionable IoCs for investigation, response, and remediation. Understanding Criminal Community Dynamics: ThreatVision Cybercrime Intelligence Enables Proactive Defense Criminal communities, ransomware groups, and APT operations do not always have clear boundaries. Similar tools, infrastructure, or techniques may appear across operations with different objectives. ThreatVision Cybercrime Intelligence helps organizations connect these signals, track ransomware activity, data leaks, attack tools, and criminal ecosystem dynamics, and turn them into intelligence for risk assessment and defense planning. Expert In-depth Analysis : Provides context and supporting evidence beyond standard alerts. Adversary Profiling : Profiles ransomware groups and criminal ecosystems. Attack Techniques and Tactics : Tracks attack tools, technique changes, and target selection. Intelligence-driven Decision Making : Connects intelligence to operational risk and strategy development. With ThreatVision Cybercrime Intelligence, organizations can identify risk signals earlier, guide defensive resources, accelerate investigations and threat hunting, and strengthen long-term cyber resilience. About TeamT5 TeamT5 is a threat intelligence research team focused on the Asia-Pacific region. Leveraging Taiwan’s geographic position, language capabilities, and over two decades of research experience, TeamT5 specializes in the analysis of major threats such as APT activity and ransomware, providing regionally grounded threat intelligence to government, financial, and technology sectors. With research at its core, TeamT5 continuously tracks the evolution of threat behavior and attack techniques, organizing complex activity into clear risk context. By monitoring both emerging and unknown threats and analyzing attacker behavior, TeamT5 helps organizations identify risks earlier, reduce exposure time, and strengthen preparedness. Research findings are shared across international security forums, while long-term partnerships are built on trust and practical collaboration. Media Inquiries & Business Partnerships : [email protected]

Taipei, Taiwan, April 24, 2026 - TeamT5, a cybersecurity company specializing in cyber threat research and intelligence analysis, and the Taiwan Network Information Center (TWNIC) announced today that they have signed a Memorandum of Understanding (MOU). Under the MOU, the two organizations will establish a threat intelligence sharing framework, integrate complementary resources and deepen collaboration to strengthen Taiwan’s overall cybersecurity resilience and support the development of the cybersecurity industry. The collaboration will cover intelligence exchange and joint research. TeamT5 will contribute expertise in advanced persistent threat (APT) research, including indicators of compromise (IOCs) and technical analysis of cybercrime activities. TWNIC will contribute DNS resolution-related data and anonymized datasets collected through honeypot mechanism, in accordance with applicable privacy, security, and internal governance requirement. Through high-quality intelligence sharing, both organizations aim to identify potential risks earlier and strengthen early warning and incident response capabilities. TeamT5 has long been dedicated to cybersecurity threat research in the Asia-Pacific region, with extensive experience in APT intelligence and malware analysis. TWNIC, as Taiwan’s national network information center and a key operator within Taiwan’s Internet infrastructure, TWNIC plays a critical role in domain name management and internet governance. By combining their respective strengths, this partnership is expected to further enhance Taiwan’s participation, visibility, and contribution within the global cybersecurity community. Sung-ting Tsai, Chief Executive Officer of TeamT5, said: “As cyber threats become increasingly sophisticated and persistent, no single organization can address them alone. Through our collaboration with TWNIC, we aim to establish a more robust intelligence exchange mechanism, transform research insights into actionable defense capabilities and help a more resilient cybersecurity environment for Taiwan. We also see this partnership as an opportunity to reinforce TeamT5’s role as a leading threat intelligence provider in the Asia-Pacific region and to expand our contribution tothe global cybersecurity landscape.” Jo-Fan YU, Managing Director and Chief Executive Officer of TWNIC, said: “As cyber threats continue to evolve, TWNIC, as a critical part of Taiwan’s Internet infrastructure, remains committed to strengthening DNS protection and advancing the collection, analysis, and application of threat intelligence. This collaboration with TeamT5 will broaden our intelligence sources and analytical depth, enabling more effective integration and use of information to detect and respond to malicious activities, and ultimately strengthen Taiwan’s overall cybersecurity resilience.” Looking ahead, TWNIC will continue to serve as a bridge connecting domestic and international cybersecurity communities, promoting collaboration and exchange to build a more stable and trustworthy internet environment for Taiwan. The two organizations will also explore additional areas of cooperation, including cybersecurity research and technical exchange, to support the long-term development of Taiwan’s cybersecurity ecosystem. TeamT5 and TWNIC Sign MOU to Strengthen Threat Intelligence Sharing and Cybersecurity Resilience in TaiwanLeft: Jo-Fan YU, Managing Director and Chief Executive Officer of TWNIC; Right: Sung-Ting Tsai, Chief Executive Officer of TeamT5. About TeamT5 TeamT5 is a threat intelligence research team focused on the Asia-Pacific region. Leveraging Taiwan’s geographic position, language capabilities, and over two decades of research experience, TeamT5 specializes in the analysis of major threats such as APT activity and ransomware, providing regionally grounded threat intelligence to government, financial, and technology sectors. With research at its core, TeamT5 continuously tracks the evolution of threat behavior and attack techniques, organizing complex activity into clear risk context. By monitoring both emerging and unknown threats and analyzing attacker behavior, TeamT5 helps organizations identify risks earlier, reduce exposure time, and strengthen preparedness. Research findings are shared across international security forums, while long-term partnerships are built on trust and practical collaboration. About TWNIC The Taiwan Network Information Center (TWNIC) is Taiwan’s national network information center, responsible for managing critical internet resources and advancing Internet governance. It plays a key role in technological development, security enhancement, and multi-stakeholder collaboration within Taiwan’s internet ecosystem. TWNIC oversees the administration of the country-code top-level domains “.tw” and “.台灣,” continuously improving registration systems, security technologies, and service mechanisms to support Taiwan’s digital development. In response to rapid technological advancements and emerging challenges such as artificial intelligence applications, cybersecurity risks, and online fraud, TWNIC actively promotes initiatives in network security, digital trust, and governance resilience. Through institutional frameworks, technical innovation, and cross-sector collaboration, TWNIC ensures the stability, integrity, and trustworthiness of the domain name space, contributing to a more reliable digital environment. Guided by principles of public interest, professional governance, and sustainable development, TWNIC is committed to building a secure, open, inclusive, and trusted digital ecosystem for Taiwan.

約20年間にわたり、TeamT5はアジア太平洋地域に深く根差し、脅威アクターの調査、攻撃キャンペーンの追跡、見過ごされがちなリスクや脅威の兆候解明に取り組んできました。 今日、弊社は正式に新たなブランドアイデンティティを発表します。この変革は単なるビジュアルの刷新ではなく、私たちのアイデンティティと価値観、そしてグロ－バルに向けた歩みを明確に示すものです。 アジア太平洋にルーツを持つ脅威インテリジェンスの先駆者 TeamT5はアジアで生まれた脅威インテリジェンスのパイオニアです。 台湾を拠点に、独自の地政学的視点と高度な言語分析能力を活かし、アジア太平洋地域における高度持続的脅威（APT）やランサムウェアの活動を追跡しています。 私たちは政府機関、金融機関、テクノロジーリーダーなどに対して、単なるデータではなく、地域の文脈に基づいた実用的なインサイトを提供しています。これらは、組織の重要度の高い環境において即座に活用できる脅威インテリジェンスです。 今回のリブランディングは、私たちの進む方向を変えるものではありません。むしろ創業当初から掲げてきた使命ー「複雑な脅威を、決断につながる行動へと変えること」ーを最も純粋な形で表現するものです。 進化：技術的ルーツから世界規模で信頼されるパートナーへ TeamT5のミッションは決してシンプルではありませんが、常に明確です。 「複雑な脅威を実用的なインテリジェンスへと変換し、組織が受動的な防御から、より高度な検知を対応へと移行できるように支援すること。」 脅威はますます速い速度で進化し、追跡や分析が難しくなっています。こうした状況の中でインテリジェンスの価値は、単に「起きたこと」だけを伝えるに留まってはなりません。 より重要なのは、インテリジェンスによって組織が重要な兆候を早期にとらえ、具体的な行動につなげられるように支援することです。これにより組織は確信をもって迅速かつ的確な意思決定が行えます。 今回の節目はTeamT5にとって重要な前進を意味します。アジア太平洋地域、そして世界へと影響力が拡大していく中で、私たちはビジョンの規模、専門性の深さ、そしてお客様が信頼する確かな価値を反映したブランドが必要でした。 今回のブランドの刷新は、TeamT5の進化を象徴するもので、技術志向のスタートアップからより成熟し、専門性と信頼性を兼ね備えた企業ブランドへと成長した姿を示しています。また国際市場における長期的展開を見据え、統一されたグローバルブランディングアイデンティティを確立するものでもあります。 この進化は新しいビジュアルアイデンティティにも反映されており、現実の世界でTeamT5がどのように行動しているのかを示しています。 脅威が進化すれば、私たちは常に警戒を保ち、継続的に追跡します。 重要な局面が訪れれば、意思決定のための支援を即座に行います。 そして、どれだけ膨大な情報が存在したとしても、本当に重要なものに焦点を当て続けます。 新しいロゴのコンセプト「スポットライト：視野を研ぎ澄ます（The Spotlight: Sharpen the Sight） 」これはサイバーセキュリティエコシステムにおけるTeamT5の役割を象徴しています。 私たちはスポットライトの下で受け身で立っているだけのディフェンダーではありません。見える領域と見えない領域の境界で活動し、影の中に潜む脅威を正確に特定するインテリジェンスハンターです。 私たちの目的は全てを照らし出すことではありません。本当に重要なシグナルに焦点を当てることで、お客様が状況をより明確に把握し、自信をもってリスクを評価し、迅速にかつ的確に行動できるよう支援することです。 私たちのコアバリュー：能動的な防御を支える脅威インテリジェンス 私たちは、脅威インテリジェンスの価値は、情報の量ではなく、組織が重要な兆候をより早く見極められるようにすることにあると考えています。 TeamT5のビジョンはアジ ア太平洋地域で最も信頼された脅威インテリジェンスパートナー になることであり、組織が 攻撃への対応に追われる状態 から、 脅威を事前に予測 できる体制へと移行できるように支援することです。 このビジョンの背景にはTeamT5が長い間指針としてきた４つのコアバリューがあります。これらの価値は単なる理念ではなく、私たちがどのように調査を行い、製品を開発し、パートナーと協力していくかを形作るものです。 継続的な探求（Continuous Exploration） 私たちは探求し続けることを止めません。 既知の脅威を監視するだけでなく、未知の領域にも積極的に踏み込みます。複雑な脅威環境の中で見過ごされがちな兆候を見つけ出し、新たに表れる攻撃パターンや手法を明らかにしていきます。 鋭い洞察（Precise Insight） 精度こそが、プロアクティブな防御の基盤です。 私たちはインジケーターを追跡すること以上に、脅威の背後にあるロジックを分析することでインテリジェンスが重要な意思決定を真に支えられるようにします。 機敏なアクション（Agile Action） サイバー脅威に直面した際、スピードは極めて重要です。 私たちは攻撃者のあらゆる動きを追跡し、脅威が深刻化する前に行動できるよう支援、そしてインテリジェンスをリアルタイムの防御へとつなげます。 信頼に基づく協力（Trusted Collaboration） 脅威インテリジェンスは共有されることで強くなります。 オープンな知識交換と双方向のコミュニケーションを通じて、私たちは顧客やパートナーとの長期的な信頼関係を築き、進化し続ける脅威に立ち向かいます。 探究の歩みをこれからも TeamT5は脅威インテリジェンスの探究者であり、イノベーターでもあります。 私たちは新たに出現する脅威の発見をリードし、攻撃者の行動を分析・解明するとともに、攻撃者と同じ速度で進化する防御能力を構築しています。 今回のリブランディングは、 探求、洞察、行動 、そして 協力 への私たちの継続的なコミットメントを示すものであり、また、私たちの信念を改めて再確認するものでもあります。 脅威インテリジェンスが正しく機能すれば、組織はサイバー防御において主導権を得ることができる。 TeamT5の創業以来のミッションは変わっていません。 —「より高精度のインテリジェンス、より先手のアクション」— 私たちの準備はできています。次の章が今、ここから始まります。

From threat detection to risk management and prevention, ThreatSonar Plus empowers enterprises to navigate the AI era Facing increasingly stealthy attacks driven by AI agents, traditional cybersecurity defenses are no longer sufficient. TeamT5, a leading threat intelligence provider in the Asia-Pacific region, today unveiled a new solution at CYBERSEC 2026 in Taiwan: ThreatSonar Plus , a ThreatSonar Plus Extensive Endpoint Assessment Platform built for AI environments. In addition to showcasing its advanced automated defense capabilities, TeamT5 also introduced its new brand identity, marking both a commitment to deep technological innovation and a milestone in its global expansion in AI cybersecurity. ThreatSonar Plus Eliminates Blind Spots in AI Agent Defense As enterprises accelerate the adoption of AI agents to drive automation, new forms of cybersecurity risk are emerging. Sung-ting Tsai, CEO of TeamT5, noted that improperly configured AI agents may lead to sensitive data leakage or exposure to malicious code injection. Given that AI agents often integrate with external services, insufficient access control can easily result in unauthorized access to confidential data. These threats are highly automated and difficult to detect, rendering traditional cybersecurity solutions ineffective. Enterprises must urgently reassess and establish protection mechanisms specifically designed for AI deployments. The newly launched ThreatSonar Plus platform directly addresses these defense gaps in AI environments. Built around three core pillars—asset inventory, risk detection, and AI agent identification—the platform enables enterprises to gain precise visibility into critical assets and AI deployments. Through in-depth analysis, administrators can quickly identify high-risk vulnerabilities and prioritize remediation strategies accordingly. Key features of ThreatSonar Plus include: AI agent risk identification, including sensitive data exposure, malicious commands, and autonomous agent behaviors Support for SEMI E187 to meet industry security and compliance requirements Rapid identification of high-risk vulnerabilities with severity-based prioritization for faster response System configuration assessment aligned with CIS benchmarks, with actionable hardening recommendations New ThreatVision Cybercrime Intelligence Reports Focus on Dark Web Cybercrime In addition to endpoint security, TeamT5 has recently introduced ThreatVision Cybercrime Intelligence. Built on TeamT5’s 20+ years of APAC threat research, it covers the Deep & Dark Web, underground forums, Telegram, and cybercrime communities, delivering expert-validated intelligence insights that analyze cybercrime operations, ransomware activity, data trades, and dark web developments from attacker’s perspective. ThreatVision Cybercrime Intelligence helps enterprises identify emerging cybercrime risks earlier, understand attacker tactics and targets, and prioritize defensive actions. By gaining visibility into cybercriminal activity across the Deep & Dark Web, enterprises can more accurately assess risk and shift from reactive response to proactive defense. From Asia-Pacific to Global Markets: Brand Transformation Signals Strategic Vision Another highlight was the debut of TeamT5’s new brand identity. Built on the concept of “focus insights and sharpened vision,” the redesign reflects its precision in threat detection and ability to help clients make decisive security decisions. CEO Sung-Ting Tsai said the rebrand marks TeamT5’s evolution into a more mature and trusted cybersecurity company, while reinforcing its global expansion strategy. Founded in Taiwan, TeamT5 has established a strong foothold in Japan and South Korea, and in recent years has expanded into Southeast Asia, including Thailand, Vietnam, Malaysia, and Singapore, with further extension into European markets. As its global footprint grows, the company continues to strengthen local partnerships and service capabilities to enhance competitiveness. TeamT5 has also initiated plans for a public offering, progressing according to schedule to support future capital market entry and long-term brand sustainability. About TeamT5 Founded in 2017, TeamT5 is a leading provider of cybersecurity threat intelligence and endpoint security solutions in the Asia-Pacific region. The company specializes in regional cyber threat research, including advanced persistent threats (APT) and ransomware. Leveraging high-precision threat intelligence and proprietary endpoint threat hunting technologies, TeamT5 delivers comprehensive security solutions to counter cyber espionage and ransomware attacks. In 2022, TeamT5 received strategic investments from JAFCO Group, ITOCHU Corporation, and MACNICA, demonstrating strong international growth potential. The company was also recognized by Frost & Sullivan as the Best Threat Intelligence Company in Taiwan for two consecutive years (2023–2024).

TeamT5 is a leading brand in delivering Asia Pacific intelligence. Our CEO Sung-Ting Tsai took Korea Boannews’s interview and share insights. Key Highlights: As Korea holds significant geopolitical and economic value, it becomes hackers’ target. Cybersecurity threats are present across all industries and government sectors. Silent attacks are more alarming than flashy ones. As our CEO says, "Security investment begins with understanding both yourself and your enemies." Read full article: Boannews

TeamT5 is a leading brand in delivering Asia Pacific intelligence. Our CTI analyst took Reuters’s interview and made comments. This is an expert of Reuters's article. Read more at Reuters . ......Targeting of semiconductors and the supply chain around them “is a persistent threat that has existed for long,” the representative said, and a “constant interest” for Chinese-related advanced hacking operators. These groups often target “peripheral suppliers or related industries,” the representative said, such as a situation in June where a China-linked hacking group identified by TeamT5 as "Amoeba" launched a phishing campaign against an unnamed chemical company that plays a critical role in the semiconductor supply chain......