-linked threat actor Earth Ammit launched two waves of campaigns targeting entities primarily in Taiwan and South Korea from 2023 to 2024. The first wave, VENOM, mainly targeted software service providers, and the second wave, TIDRONE mainly targeted the military industry. In its VENOM campaign, Earth Ammit's approach involved penetrating the upstream segment of the drone supply chain.
darkreading.com/cyberattacks-d
trendmicro.com/en_us/research