“goods ” refers to the use of illicit means, such as ghost - tapping, to purchase physical goods at physical retail stores ( in this case, in south korea and japan ). this activity also includes atm cash withdrawals at japanese or south korean atms. key personnel involved in publi…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1204.002Malicious File
37%
“creating barriers to tracking their activities. unlike conventional ghost - tapping campaigns that mainly target luxury businesses, “ sweeping teams ” typically purchase goods that are less expensive but still considered valuable to criminal groups and are relatively easy to tran…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1204.002Malicious File
35%
“that this individual understands japanese in addition to chinese, as they were observed interacting with a japanese banking application that displayed processed transactions. the transactions shown in the screenshot are dated between july 30, 2025, and august 28, 2025. the abilit…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1204User Execution
34%
“that this individual understands japanese in addition to chinese, as they were observed interacting with a japanese banking application that displayed processed transactions. the transactions shown in the screenshot are dated between july 30, 2025, and august 28, 2025. the abilit…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
Summary
Chinese-language, Telegram-based “guarantee” marketplaces are increasingly popular among Chinese-speaking criminal groups despite the widely publicized shutdown of Huione Guarantee in 2025.