“Tick” Group Continues Attacks
Unit 42 tracks the Tick espionage group attacking Korean and Japanese defense and high-tech targets with Daserf, Minzen, 9002, Invader, and custom Gh0st RAT variants.
50
Malware
Minzen
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 17, 2026
- Last mentionedAug 17, 2026
Timeline
2 articles · newest firstTick Group Weaponized Secure USB Drives to Target Air
Unit 42 says the Tick group weaponized South Korean certified secure USB drives with SymonLoader malware to reach air-gapped Windows XP systems.
42
Appears with
- Palo Alto Networksvendor · 2
- Nioupalemalware · 2
- Tickthreat actor · 2
- Kasperskyorganization · 1
- ShadowWalimalware · 1
- Palo Alto Networksorganization · 1
- Muirimmalware · 1
- Walimalware · 1
- HomamDownloadermalware · 1
- ITSCCorganization · 1
- LACorganization · 1
- XXMMmalware · 1
- SymonLoadermalware · 1
- Windows Server 2003product · 1
- Cyphortorganization · 1
- Cybereasonorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.