プレスリリース

Ransomware attacks targeting organizations worldwide continue to surge, and Japan has become one of the regions hit hardest in recent years. At TeamT5, we have been deeply involved in tracking these threats—monitoring the evolution of attack tools, detecting suspicious activities, and helping organizations safeguard their data and critical systems. We remain on the front line of this “invisible cyber war.” Recently, TeamT5 was invited by TV Tokyo program Gaia’s Dawn (ガイアの夜明け) for an in-depth interview to share our insights on ransomware trends and our frontline threat intelligence work. You can read the full written report here: link

Taipei / FIRSTCON, June 14, 2026 — TeamT5, a leading threat intelligence company, today delivered a presentation at the FIRSTCON on June 16, one of the world’s premier incident response and cybersecurity events. The session focused on cybercrime campaigns leveraging short-video platforms and cryptocurrency applications. TeamT5 also showcased its latest ThreatVision Cybercrime Intelligence offering, aimed at helping organizations stay ahead of threats and reduce potential financial and reputational damage. TeamT5 Experts Analyze Emerging Cybercrime Tactics Telegram has emerged as a major hub in the underground cybercrime ecosystem. In TeamT5’s talk, we will present firsthand observations from our analysis of how malware is advertised and sold in Chinese Telegram channels. As short‑video platforms and cryptocurrency apps gain popularity, we’ve seen threat actors increasingly exploit these trends to trick users into installing malicious software. We will share two recent campaigns — one aimed at users in China and Malaysia, and another targeting South Korea — both of which distribute trojanized APKs masquerading as legitimate apps. By examining these operations, we aim to clarify how threat actors function in these regions and how they leverage trusted platforms to broaden their reach. From Cybercrime to APT Threats: Anticipating Attack Risks with ThreatVision Cybercrime is one of the most serious challenges facing the global digital economy. Many organizations remain constrained by the final stages of the Cyber Kill Chain, responding only after alerts are triggered. Built on TeamT5’s long-term threat research, ThreatVision Cybercrime Intelligence tracks criminal communities, ransomware activity, attack tools, and relevant APT-related infrastructure, techniques, and targeting shifts. It helps organizations identify risk signals earlier and support intelligence-driven defense planning. ThreatVision monitors high-risk activity across the Deep & Dark Web, Telegram, criminal communities, and other underground sources. By analyzing ransomware activity, data leaks, criminal services, adversary behavior, and APT-related context where relevant, it turns fragmented signals into intelligence for risk assessment, threat hunting, incident investigation, and response planning. Deep & Dark Web and Cybercrime Community Monitoring : Tracks high-risk underground activity to identify operational risk signals and potential APT-related links . Intelligence Analysis and IoC Extraction : Turns cybercrime activity into contextual intelligence and actionable IoCs for investigation, response, and remediation. Understanding Criminal Community Dynamics: ThreatVision Cybercrime Intelligence Enables Proactive Defense Criminal communities, ransomware groups, and APT operations do not always have clear boundaries. Similar tools, infrastructure, or techniques may appear across operations with different objectives. ThreatVision Cybercrime Intelligence helps organizations connect these signals, track ransomware activity, data leaks, attack tools, and criminal ecosystem dynamics, and turn them into intelligence for risk assessment and defense planning. Expert In-depth Analysis : Provides context and supporting evidence beyond standard alerts. Adversary Profiling : Profiles ransomware groups and criminal ecosystems. Attack Techniques and Tactics : Tracks attack tools, technique changes, and target selection. Intelligence-driven Decision Making : Connects intelligence to operational risk and strategy development. With ThreatVision Cybercrime Intelligence, organizations can identify risk signals earlier, guide defensive resources, accelerate investigations and threat hunting, and strengthen long-term cyber resilience. About TeamT5 TeamT5 is a threat intelligence research team focused on the Asia-Pacific region. Leveraging Taiwan’s geographic position, language capabilities, and over two decades of research experience, TeamT5 specializes in the analysis of major threats such as APT activity and ransomware, providing regionally grounded threat intelligence to government, financial, and technology sectors. With research at its core, TeamT5 continuously tracks the evolution of threat behavior and attack techniques, organizing complex activity into clear risk context. By monitoring both emerging and unknown threats and analyzing attacker behavior, TeamT5 helps organizations identify risks earlier, reduce exposure time, and strengthen preparedness. Research findings are shared across international security forums, while long-term partnerships are built on trust and practical collaboration. Media Inquiries & Business Partnerships : [email protected]

Taipei, Taiwan, April 24, 2026 - TeamT5, a cybersecurity company specializing in cyber threat research and intelligence analysis, and the Taiwan Network Information Center (TWNIC) announced today that they have signed a Memorandum of Understanding (MOU). Under the MOU, the two organizations will establish a threat intelligence sharing framework, integrate complementary resources and deepen collaboration to strengthen Taiwan’s overall cybersecurity resilience and support the development of the cybersecurity industry. The collaboration will cover intelligence exchange and joint research. TeamT5 will contribute expertise in advanced persistent threat (APT) research, including indicators of compromise (IOCs) and technical analysis of cybercrime activities. TWNIC will contribute DNS resolution-related data and anonymized datasets collected through honeypot mechanism, in accordance with applicable privacy, security, and internal governance requirement. Through high-quality intelligence sharing, both organizations aim to identify potential risks earlier and strengthen early warning and incident response capabilities. TeamT5 has long been dedicated to cybersecurity threat research in the Asia-Pacific region, with extensive experience in APT intelligence and malware analysis. TWNIC, as Taiwan’s national network information center and a key operator within Taiwan’s Internet infrastructure, TWNIC plays a critical role in domain name management and internet governance. By combining their respective strengths, this partnership is expected to further enhance Taiwan’s participation, visibility, and contribution within the global cybersecurity community. Sung-ting Tsai, Chief Executive Officer of TeamT5, said: “As cyber threats become increasingly sophisticated and persistent, no single organization can address them alone. Through our collaboration with TWNIC, we aim to establish a more robust intelligence exchange mechanism, transform research insights into actionable defense capabilities and help a more resilient cybersecurity environment for Taiwan. We also see this partnership as an opportunity to reinforce TeamT5’s role as a leading threat intelligence provider in the Asia-Pacific region and to expand our contribution tothe global cybersecurity landscape.” Jo-Fan YU, Managing Director and Chief Executive Officer of TWNIC, said: “As cyber threats continue to evolve, TWNIC, as a critical part of Taiwan’s Internet infrastructure, remains committed to strengthening DNS protection and advancing the collection, analysis, and application of threat intelligence. This collaboration with TeamT5 will broaden our intelligence sources and analytical depth, enabling more effective integration and use of information to detect and respond to malicious activities, and ultimately strengthen Taiwan’s overall cybersecurity resilience.” Looking ahead, TWNIC will continue to serve as a bridge connecting domestic and international cybersecurity communities, promoting collaboration and exchange to build a more stable and trustworthy internet environment for Taiwan. The two organizations will also explore additional areas of cooperation, including cybersecurity research and technical exchange, to support the long-term development of Taiwan’s cybersecurity ecosystem. TeamT5 and TWNIC Sign MOU to Strengthen Threat Intelligence Sharing and Cybersecurity Resilience in TaiwanLeft: Jo-Fan YU, Managing Director and Chief Executive Officer of TWNIC; Right: Sung-Ting Tsai, Chief Executive Officer of TeamT5. About TeamT5 TeamT5 is a threat intelligence research team focused on the Asia-Pacific region. Leveraging Taiwan’s geographic position, language capabilities, and over two decades of research experience, TeamT5 specializes in the analysis of major threats such as APT activity and ransomware, providing regionally grounded threat intelligence to government, financial, and technology sectors. With research at its core, TeamT5 continuously tracks the evolution of threat behavior and attack techniques, organizing complex activity into clear risk context. By monitoring both emerging and unknown threats and analyzing attacker behavior, TeamT5 helps organizations identify risks earlier, reduce exposure time, and strengthen preparedness. Research findings are shared across international security forums, while long-term partnerships are built on trust and practical collaboration. About TWNIC The Taiwan Network Information Center (TWNIC) is Taiwan’s national network information center, responsible for managing critical internet resources and advancing Internet governance. It plays a key role in technological development, security enhancement, and multi-stakeholder collaboration within Taiwan’s internet ecosystem. TWNIC oversees the administration of the country-code top-level domains “.tw” and “.台灣,” continuously improving registration systems, security technologies, and service mechanisms to support Taiwan’s digital development. In response to rapid technological advancements and emerging challenges such as artificial intelligence applications, cybersecurity risks, and online fraud, TWNIC actively promotes initiatives in network security, digital trust, and governance resilience. Through institutional frameworks, technical innovation, and cross-sector collaboration, TWNIC ensures the stability, integrity, and trustworthiness of the domain name space, contributing to a more reliable digital environment. Guided by principles of public interest, professional governance, and sustainable development, TWNIC is committed to building a secure, open, inclusive, and trusted digital ecosystem for Taiwan.

約20年間にわたり、TeamT5はアジア太平洋地域に深く根差し、脅威アクターの調査、攻撃キャンペーンの追跡、見過ごされがちなリスクや脅威の兆候解明に取り組んできました。 今日、弊社は正式に新たなブランドアイデンティティを発表します。この変革は単なるビジュアルの刷新ではなく、私たちのアイデンティティと価値観、そしてグロ－バルに向けた歩みを明確に示すものです。 アジア太平洋にルーツを持つ脅威インテリジェンスの先駆者 TeamT5はアジアで生まれた脅威インテリジェンスのパイオニアです。 台湾を拠点に、独自の地政学的視点と高度な言語分析能力を活かし、アジア太平洋地域における高度持続的脅威（APT）やランサムウェアの活動を追跡しています。 私たちは政府機関、金融機関、テクノロジーリーダーなどに対して、単なるデータではなく、地域の文脈に基づいた実用的なインサイトを提供しています。これらは、組織の重要度の高い環境において即座に活用できる脅威インテリジェンスです。 今回のリブランディングは、私たちの進む方向を変えるものではありません。むしろ創業当初から掲げてきた使命ー「複雑な脅威を、決断につながる行動へと変えること」ーを最も純粋な形で表現するものです。 進化：技術的ルーツから世界規模で信頼されるパートナーへ TeamT5のミッションは決してシンプルではありませんが、常に明確です。 「複雑な脅威を実用的なインテリジェンスへと変換し、組織が受動的な防御から、より高度な検知を対応へと移行できるように支援すること。」 脅威はますます速い速度で進化し、追跡や分析が難しくなっています。こうした状況の中でインテリジェンスの価値は、単に「起きたこと」だけを伝えるに留まってはなりません。 より重要なのは、インテリジェンスによって組織が重要な兆候を早期にとらえ、具体的な行動につなげられるように支援することです。これにより組織は確信をもって迅速かつ的確な意思決定が行えます。 今回の節目はTeamT5にとって重要な前進を意味します。アジア太平洋地域、そして世界へと影響力が拡大していく中で、私たちはビジョンの規模、専門性の深さ、そしてお客様が信頼する確かな価値を反映したブランドが必要でした。 今回のブランドの刷新は、TeamT5の進化を象徴するもので、技術志向のスタートアップからより成熟し、専門性と信頼性を兼ね備えた企業ブランドへと成長した姿を示しています。また国際市場における長期的展開を見据え、統一されたグローバルブランディングアイデンティティを確立するものでもあります。 この進化は新しいビジュアルアイデンティティにも反映されており、現実の世界でTeamT5がどのように行動しているのかを示しています。 脅威が進化すれば、私たちは常に警戒を保ち、継続的に追跡します。 重要な局面が訪れれば、意思決定のための支援を即座に行います。 そして、どれだけ膨大な情報が存在したとしても、本当に重要なものに焦点を当て続けます。 新しいロゴのコンセプト「スポットライト：視野を研ぎ澄ます（The Spotlight: Sharpen the Sight） 」これはサイバーセキュリティエコシステムにおけるTeamT5の役割を象徴しています。 私たちはスポットライトの下で受け身で立っているだけのディフェンダーではありません。見える領域と見えない領域の境界で活動し、影の中に潜む脅威を正確に特定するインテリジェンスハンターです。 私たちの目的は全てを照らし出すことではありません。本当に重要なシグナルに焦点を当てることで、お客様が状況をより明確に把握し、自信をもってリスクを評価し、迅速にかつ的確に行動できるよう支援することです。 私たちのコアバリュー：能動的な防御を支える脅威インテリジェンス 私たちは、脅威インテリジェンスの価値は、情報の量ではなく、組織が重要な兆候をより早く見極められるようにすることにあると考えています。 TeamT5のビジョンはアジ ア太平洋地域で最も信頼された脅威インテリジェンスパートナー になることであり、組織が 攻撃への対応に追われる状態 から、 脅威を事前に予測 できる体制へと移行できるように支援することです。 このビジョンの背景にはTeamT5が長い間指針としてきた４つのコアバリューがあります。これらの価値は単なる理念ではなく、私たちがどのように調査を行い、製品を開発し、パートナーと協力していくかを形作るものです。 継続的な探求（Continuous Exploration） 私たちは探求し続けることを止めません。 既知の脅威を監視するだけでなく、未知の領域にも積極的に踏み込みます。複雑な脅威環境の中で見過ごされがちな兆候を見つけ出し、新たに表れる攻撃パターンや手法を明らかにしていきます。 鋭い洞察（Precise Insight） 精度こそが、プロアクティブな防御の基盤です。 私たちはインジケーターを追跡すること以上に、脅威の背後にあるロジックを分析することでインテリジェンスが重要な意思決定を真に支えられるようにします。 機敏なアクション（Agile Action） サイバー脅威に直面した際、スピードは極めて重要です。 私たちは攻撃者のあらゆる動きを追跡し、脅威が深刻化する前に行動できるよう支援、そしてインテリジェンスをリアルタイムの防御へとつなげます。 信頼に基づく協力（Trusted Collaboration） 脅威インテリジェンスは共有されることで強くなります。 オープンな知識交換と双方向のコミュニケーションを通じて、私たちは顧客やパートナーとの長期的な信頼関係を築き、進化し続ける脅威に立ち向かいます。 探究の歩みをこれからも TeamT5は脅威インテリジェンスの探究者であり、イノベーターでもあります。 私たちは新たに出現する脅威の発見をリードし、攻撃者の行動を分析・解明するとともに、攻撃者と同じ速度で進化する防御能力を構築しています。 今回のリブランディングは、 探求、洞察、行動 、そして 協力 への私たちの継続的なコミットメントを示すものであり、また、私たちの信念を改めて再確認するものでもあります。 脅威インテリジェンスが正しく機能すれば、組織はサイバー防御において主導権を得ることができる。 TeamT5の創業以来のミッションは変わっていません。 —「より高精度のインテリジェンス、より先手のアクション」— 私たちの準備はできています。次の章が今、ここから始まります。

TeamT5 , a leading provider of threat intelligence and threat hunting solutions , today announced an enhanced strategic partnership with Netpoleon, region’s foremost cybersecurity solution distributor. Under this expanded collaboration, Netpoleon will extend its distribution coverage across Asia-Pacific to include TeamT5’s full portfolio of intelligence-driven cybersecurity solutions. Together, the two companies aim to empower enterprises and organizations to strengthen cyber defenses and build resilience against an increasingly complex and evolving threat landscape. Strengthened Partnership to Enhance Cyber Defense for Asia-Pacific Customers Since forming their partnership, TeamT5 and Netpoleon have worked closely to combine intelligence-driven cybersecurity solutions with deep local market expertise, providing enterprises with faster and more accurate cybersecurity defenses. The deepened collaboration reflects a high level of mutual trust and a shared long-term vision, and both sides will continue to drive the advancement of cybersecurity defense across the Asia-Pacific region. Currently, Netpoleon has a strong presence in the cybersecurity market including Singapore, Malaysia, Thailand, Indonesia, Vietnam, India, the Philippines, Australia, and New Zealand . Through their close cooperation, TeamT5’s solutions have been successfully implemented in three of the top five financial institutions in Vietnam, as well as in key infrastructure, real estate, retail, and government organizations. The solutions have also been deployed within Malaysian government agencies, demonstrating the tangible results of their partnership in the region. Comprehensive TeamT5 Solutions Strengthen Multi-Layered Defense TeamT5’s strong technical expertise—rooted in its deep understanding of the Asia-Pacific threat landscape—has earned international recognition, most notably being named Frost & Sullivan’s Threat Intelligence Company of the Year for two consecutive years . The company has also received the Computex Best Choice Award - Golden Award , further demonstrating the industry’s acknowledgment of TeamT5’s innovation and technical leadership. Netpoleon will expand promotion of TeamT5’s full suite of solutions, including: ThreatVision , a threat intelligence platform that consolidates years of research and tracking conducted by TeamT5 experts. It helps organizations quickly understand advanced persistent threat(APT) activities and dark web criminal trends, and identify and patch high-risk vulnerabilities before they are exploited. ThreatSonar , a threat hunting platform that integrates intelligence research with real-world attack–defense experience. It helps organizations pinpoint threat sources and compromise paths, uncover hidden threats, strengthen defense-in-depth, and protect endpoints—thereby minimizing potential future damage from cyber incidents. Sung-ting Tsai , TeamT5 CEO, remarks , “Netpoleon is a leading cybersecurity distributor in the Asia-Pacific region, and we’re excited to deepen our partnership. This collaboration allows us to deliver TeamT5’s advanced technologies to more enterprises while leveraging Netpoleon’s strong regional expertise. Together, we’re strengthening our service capabilities and advancing our global strategy to enhance cyber defense worldwide.” Francis Goh , Chairman and CEO at Netpoleon, remarks , “As the complexity of cybersecurity continues to increase, we are committed to empowering our channel partners across the region with best-in-class technologies. I believe that adding TeamT5 to our cybersecurity portfolio enables us to support our partners with greater value creation for their customers, especially with TeamT5 Asia Focus intelligence! “ About Netpoleon Netpoleon Group is a Value-Added Distributor (VAD) of Network Security products, headquartered in Singapore with various full-fledged offices across APAC region in Australia, Cambodia, India, Indonesia, Malaysia, Myanmar, New Zealand, Philippines, Thailand and Vietnam. Partnering with major leading technology vendors, Netpoleon continues to value-add the Vendor’s offering through pre-and post-sales services, as well as professional advisory services on Cybersecurity to our channel partners across the region. Netpoleon continues to look forward to being one of the Most Trusted Partners (MTP) to our Vendors, Resellers and Customers. About TeamT5 TeamT5 is a leading cybersecurity company specializing in threat intelligence and advanced threat hunting , with deep roots in the Asia-Pacific region. Leveraging Taiwan’s strategic location, linguistic diversity, and over 20 years of accumulated research expertise, TeamT5 focuses on analyzing APT attacks and ransomware threats to deliver the most localized intelligence and protection solutions for governments, financial institutions, and technology enterprises. TeamT5 has been recognized for two consecutive years by international research and consulting firm Frost & Sullivan as Taiwan’s Threat Intelligence Company of the Year. Media Contact: [email protected]

Top threat analysts from the Asia-Pacific region gathered to share practical experience and forward-looking strategies, focusing on three key issues and urging all sectors to pay attention to threat intelligence and strengthen defense gaps. [Taipei, December 3, 2025] The 2025 Threat Analyst Summit (TAS), hosted by leading threat intelligence firm TeamT5, took place on December 3–4 in Taipei, Taiwan. This year’s summit surpassed previous editions in scale and international reach, with nearly two-thirds of participants traveling from abroad and representing more than 20 countries. Over 200 cybersecurity experts and practitioners attended the event, engaging in knowledge sharing, experience exchange, and in-depth discussions on the global threat landscape. The forum boasted a strong lineup of speakers, bringing together leading international cybersecurity and technology companies, including ITOCHU, MACNICA, LAC, Constella Security Japan, The Korea Financial Security Institute, Team Cymru, Recorded Future, Shreshta, Meta, DarkLab, Microlab.red , and Trend Micro, whose industry authorities provided insightful perspectives. Experts Highlight Persistent Security Gaps and Urge Stronger Commitment to Threat Intelligence The summit continued the focus of the previous two TAS events, providing an in-depth look at the latest activities of APT groups across the Asia-Pacific region. This year’s program also expanded to key themes including cybercrime trends and the evolving landscape of information operation. Looking back at the cybersecurity landscape in 2025, the year has been marked by a series of high-impact incidents, from the early-year CrazyHunter attack and the surge of APT campaigns exploiting VPN vulnerabilities, to the recent breach of a globally recognized beer manufacturer that forced a complete shutdown of its production lines. These events underscore that, despite rising cybersecurity awareness within enterprises, critical gaps in defense architectures persist, creating opportunities for attackers to exploit weaknesses. Strengthening these defenses proactively remains essential to mitigating future threats and reducing operational risk. VPN Vulnerabilities Emerge as Key Intrusion Vectors; Supply Chain Security Becomes a Critical Challenge In cybersecurity architecture, "threat intelligence collecting and application" has become a crucial area that enterprise cybersecurity personnel urgently need to strengthen. Only through systematic intelligence analysis and application can early warnings, rapid responses, and prevention be achieved before attacks occur, effectively reducing risks and operational damage. TeamT5 CEO Tsai Sung-ting (TT) stated that the most frequent cybersecurity threat this year is network device intrusion . Therefore, several case studies on VPN device intrusion were arranged for presentations. Currently, cybercriminal ransomware groups do not initially target specific companies. Instead, they determine their targets after obtaining vulnerability information on the original equipment manufacturer's (OEM) devices, often choosing high-value companies, attempting to gain root access, and then launching encrypted ransomware attacks. Tsai Sung-ting pointed out that in the past year, Chinese hacker activities have become increasingly rampant, frequently infiltrating enterprise network environments through hardware and software vulnerabilities. Many of these cases involve equipment hosted by external vendors, which can be categorized as supply chain intrusion. Even if enterprises have deployed numerous protective measures, they may still suffer losses if their hosting vendors are attacked. Cybersecurity Remains a Complex Undertaking, Requiring Determination from Strategy to Execution Tsai Sung-ting emphasized that in practice, even if the client company actively implements cybersecurity measures, if the vendor is negligent in management and lacks adequate protection, they are often unknowingly compromised by hackers, ultimately leading to serious losses. This shows that "supply chain cybersecurity management" is often the most easily overlooked aspect of corporate cybersecurity strategies, yet it is also a critical point with extremely high risks. He added that large companies don't necessarily have good cybersecurity practices, especially in manufacturing or traditional industries. Willingness to invest resources, having the right strategies, and finding a professional team to assist are all challenges companies face in promoting cybersecurity. Cybersecurity is a long-term and continuous endeavor; however, the reality is that many companies are still at the stage of wanting to do it, and the journey from that to wanting to understand how to do it, and then to serious implementation, is long, testing the determination of business owners and management teams. About TeamT5 Founded in 2017, TeamT5 is a leading provider of cybersecurity threat intelligence and endpoint security solutions in the Asia-Pacific region. Specializing in cyber threat research in the Asia-Pacific region, covering Advanced Persistent Threats (APTs) and ransomware, the company leverages precise threat intelligence and unique endpoint threat hunting technology to provide clients with comprehensive cybersecurity solutions for effectively countering cyber espionage and ransomware attacks. In 2022, it received joint investment from JAFCO, Japan's largest venture capital firm; ITOCHU, Japan's largest multinational corporation; and MACNICA, Japan's largest cybersecurity solutions provider, demonstrating its significant international potential. From 2023 to 2024, TeamT5 was consecutively recognized as Taiwan's Best Threat Intelligence Company by the international consulting firm Frost & Sullivan. To promote cyber threat research and international cybersecurity cooperation in the Asia-Pacific region, the company piloted the Threat Analyst Summit (TAS) in 2022 and officially held its first TAS Threat Analyst Summit in 2023, successfully establishing an important platform for Asia-Pacific cybersecurity experts to share the latest threat dynamics and forward-looking strategies.

Taipei, November 26, 2025 — TeamT5 has once again been recognized for its outstanding innovation and leadership in cybersecurity. Two of its flagship products—the ThreatVision (Threat Intelligence Platform) and the ThreatSonar Anti-Ransomware (Endpoint Detection & Response)—have both won the 34th Taiwan Excellence Award . This recognition highlights TeamT5’s research and development strength, as well as its market competitiveness in the global cybersecurity industry. ThreatVision: Empowering Organizations with Asia-Pacific Threat Intelligence ThreatVision is a threat intelligence platform designed for enterprises and government agencies. Built upon TeamT5’s years of advanced cyber threat research, it helps cybersecurity teams quickly identify and analyze advanced persistent threat (APT) activities, track dark web criminal trends, and address high-risk vulnerabilities before they can be exploited. With its localized Asia-Pacific threat insights , ThreatVision delivers precise indicators of compromise along with deep correlations between malware and attack behaviors. The platform empowers users to anticipate attack patterns and take preventive measures—strengthening the overall resilience of their cybersecurity defenses. ThreatSonar Anti-Ransomware: Proactive Defense Against Ransomware Attacks ThreatSonar Anti-Ransomware is an enterprise-grade, proactive defense solution that integrates malicious behavior detection, intrusion prevention, and incident response capabilities into a unified platform. Its core technology automatically interrupts malicious processes before ransomware can encrypt critical files, drastically minimizing potential damage. By leveraging TeamT5’s accurate threat intelligence, ThreatSonar Anti-Ransomware enhances its ability to identify suspicious endpoint behaviors in real time—delivering a complete defense lifecycle from detection and alert to active protection, safeguarding enterprise assets with precision and reliability. Advancing Taiwan’s Cybersecurity Innovation and Global Competitiveness The Taiwan Excellence Award, often regarded as the “Oscars of Taiwan’s Industry,” evaluates products based on R&D, design, quality, and marketing. TeamT5’s dual recognition demonstrates its commitment to innovation, excellence, and international expansion in cybersecurity technology and product development. Tsai Sung-ting, CEO of TeamT5, remarked:“Our mission is to protect the cybersecurity of global clients through world-class cybersecurity research and technology. Receiving the Taiwan Excellence Award affirms TeamT5’s enduring commitment to innovation and excellence.” About TeamT5 TeamT5 is a leading cybersecurity company specializing in threat intelligence and advanced malware analysis , with deep roots in the Asia-Pacific region. Leveraging Taiwan’s strategic location, linguistic diversity, and over 20 years of accumulated research expertise, TeamT5 focuses on analyzing APT attacks and ransomware threats to deliver the most localized intelligence and protection solutions for governments, financial institutions, and technology enterprises. TeamT5 has been recognized for two consecutive years by international research and consulting firm Frost & Sullivan as Taiwan’s Threat Intelligence Company of the Year . Media Contact: [email protected]

TeamT5 , a leading threat intelligence provider focused on the Asia-Pacific region, has integrated its ThreatVision platform with Filigran’s OpenCTI . This powerful collaboration enables modern security operations centers (SOCs) to harness the full power of contextual, actionable threat intelligence from both global and regional sources. Unmatched Visibility into Asia-Pacific Threats Twice recognized as "Taiwan's Best Threat Intelligence Company" by Frost & Sullivan, TeamT5 has built a reputation for delivering unique and deep intelligence on cyber threats originating from the APAC region, including China, North Korea, and Vietnam. With years of research and frontline investigation, TeamT5's ThreatVision delivers: In-depth insights into APAC threat actor TTPs : Gain visibility into the evolving tools and methods used by regional adversaries. Campaign tracking and attribution : Stay informed about threat actor operations and motivations through comprehensive adversary profiling. Technical vulnerability analysis : Understand the real-world impact and exploitation methods behind high-profile vulnerabilities. ThreatVision delivers this intelligence in enriched formats—from malware samples to actor profiles—helping analysts quickly contextualize and act on emerging threats. OpenCTI: The Foundation for Intelligence-Driven SOCs Filigran’s OpenCTI is a powerful open-source threat intelligence platform that centralizes and connects knowledge about cyber threats. Built to support intelligence-driven operations, OpenCTI provides: Structured knowledge modeling : Connect threat indicators, actor behaviors, attack techniques, and campaign data in a single dynamic knowledge graph. Collaborative workflows : Enhance analyst collaboration through shared investigation, annotation, and threat mapping. Flexible integrations and automation : Enrich and distribute intelligence across the security stack using API connectivity and automated playbooks. By integrating ThreatVision into OpenCTI, users benefit from enriched intelligence flows that directly enhance detection engineering, threat hunting, and incident response strategies. Real-World Use Cases Enhanced by the Integration The synergy between TeamT5 and Filigran supports multiple high-impact cybersecurity workflows, including: Threat Attribution : Analysts can now trace TTPs and infrastructure back to APAC adversaries using ThreatVision’s detailed actor insights. Correlated Intelligence : TeamT5’s contextual intelligence correlating to indicators of compromise (IOCs) within OpenCTI, accelerating triage and validation. Proactive Threat Hunting : Use ThreatVision’s flash reports and technical findings to guide hypothesis-driven threat hunting. About Filigran Filigran builds and maintains OpenCTI, an open-source platform designed to structure and operationalize cyber threat intelligence. Trusted by private and public sector organizations worldwide, Filigran supports intelligence-led security operations through open innovation, collaboration, and adaptability. About TeamT5 TeamT5 consists of elite cyber threat analysts specializing in Asia-Pacific threat actors. With deep regional insight and strong technical expertise, TeamT5 empowers security teams around the globe to stay ahead of sophisticated cyber threats. Trusted by government, defense, and enterprise customers, TeamT5 continues to deliver accurate, actionable threat intelligence and strategic guidance.

アジア太平洋地域における主要な脅威インテリジェンスブランドであるTeamT5は、最新のサイバーセキュリティ脅威インサイトを発表し、APT（高度持続的脅威）インシデントの増加が続いていることを明らかにしました。地域では、情報技術分野（半導体産業を含む）が最も多く標的となっています。TeamT5は、組織が最新の脅威インテリジェンスを活用し、攻撃者の戦術・技術・手順（TTP）を理解することで、防御態勢を強化すべきだと提言しています。 2025年上半期、アジア太平洋地域における地政学的緊張（中国と台湾の関係、米中の技術競争の激化、インドとパキスタンの対立など）がサイバースペースにも波及しました。その結果、APT攻撃は増加し、攻撃者はより高度な手法を用いるようになっています。 攻撃対象産業と事例 アジア太平洋地域において、TeamT5は15万件以上のインシデントの中から200件超の標的型攻撃を特定しました。業種別では、情報技術分野（半導体産業を含む）が最も多く標的とされ、次いで政府機関や重要インフラ（通信、医療、エネルギー、交通など）が続きます。 日本では、製造業が最も多く標的となっており、政府機関、情報技術分野、金融機関も継続的な脅威にさらされています。 東南アジアでは、政府機関とエネルギー分野が主な標的です。 台湾では、情報技術分野（半導体を含む）および重要インフラ（エネルギー、医療、交通など）が標的とされています。さらに、CrazyHunterランサムウェア攻撃が複数の台湾組織に影響を及ぼし、被害は医療機関、情報技術分野、学術機関に及びました。（ 詳細分析：[ケーススタディ] CrazyHunterランサムウェアが台湾の病院を標的に ） 攻撃手法の傾向 攻撃手法に関しては、特に注目すべき2つの傾向があります。1つは、正規のツールを悪用してマルウェアを展開する手法であり、もう1つは、特定のデバイスを標的とするマルウェアの使用です。 また、以下の重大な脆弱性が国家支援型脅威アクターによって広く悪用されていることが確認されています： Ivanti Connect Secure VPN: CVE-2025-0282 and CVE-2025-22457 Check Point VPN: CVE-2024-24919 SAP NetWeaver: CVE-2025-31324 TeamT5は、関連機器やサービスを使用している組織に対し、早急なパッチ適用を推奨しています。 注意すべき攻撃動向とTeamT5のインサイト TeamT5は、2025年上半期のサイバー攻撃における重要な傾向として、中国が自国に対する非難に反論する形で、米国や台湾にサイバー攻撃の責任を公然と主張するようになっていることを指摘しました。 例として、4月には、ハルビン市公安局が米国家安全保障局（NSA）の職員3名を、アジア冬季競技大会に対する攻撃の犯人と名指ししました。6月には、広州市公安局が、台湾の情報通信電子部隊（ICEFCOM）が中国のテック企業に対するサイバー攻撃を行ったと主張し、ICEFCOMの兵士20名の名前を公開、台湾の与党である民進党（DPP）との関与を示唆しました。 さらに、TeamT5の専門家は、生成AIツールが情報戦に利用されるケースが増加していると指摘しています。これにより、リアルと見分けがつかない偽コンテンツや偽画像の作成が容易になり、防御の難易度が一層高まっています。 結論 2025年後半に向けて、アジア太平洋地域におけるサイバーセキュリティの状況は引き続き不確実かつ困難なものとなるでしょう。この進化し続ける脅威環境で先手を打ち、リスクを軽減するためには、常に最新の脅威インテリジェンスを活用し、検知・対応能力を強化することが不可欠です。ますます巧妙化する攻撃手法に対抗するには、脅威インテリジェンスに基づいた防御戦略の早期導入が、業務の安定とデジタル資産の保護にとって鍵となります。 広報担当者へ: [email protected]