KINWILDER

Earth Wendigo

No sourced public emblem in this profile.

reference profile · reported nexus: CN (not nationality)

Earth Wendigo is a threat actor from China that has been targeting several organizations — including government organizations, research institutions, and universities in Taiwan — since May 2019, aiming to exfiltrate emails from targeted organizations via the injection of JavaScript backdoors to a webmail system that is widely used in Taiwan. The threat actor also sent spear-phishing emails embedded with malicious links to multiple individuals, including politicians and activists, who support movements in Tibet, the Uyghur region, or Hong Kong.

Source-reported aliases: . Associations do not prove equivalence.

Target geography

Catalog-listed countries (associations, not attack counts): Hong Kong · Taiwan

No bound claim-post feed for this label.

Historical casebook

No dated record curated yet; absence does not establish inactivity.

Planned Kinwilder coverage

Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.

No assigned review window.

References

Pinned source catalog

https://www.trendmicro.com/en_us/research/21/a/earth-wendigo-injects-javascript-backdoor-to-service-worker-for-.html

Submission and profile-update guide · Publisher API

Editorial standard · root@kinwilder.com · RSS · Outpost