MirrorFace
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
MirrorFace is a Chinese-speaking advanced persistent threat group that has been targeting high-value organizations in Japan, including media, government, diplomatic, and political entities. They have been conducting spear-phishing campaigns, utilizing malware such as LODEINFO and MirrorStealer to steal credentials and exfiltrate sensitive data. While there is speculation about their connection to APT10, ESET currently track them as a separate entity.
Source-reported aliases: Earth Kasha. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): No country-level metadata
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://web-assets.esetstatic.com/wls/2023/01/eset_apt_activity_report_t32022.pdf
https://blog.sekoia.io/my-teas-not-cold-an-overview-of-china-cyber-threat/
https://www.trendmicro.com/en_us/research/24/k/lodeinfo-campaign-of-earth-kasha.html