Earth Yako

Reports per quarter

CVEs named in reports

• CVE-2013-3900 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   Operation RestyLink: APT campaign targeting Japanese companies

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Operation RestyLink: APT campaign targeting Japanese companies

2. 16 February 2023

   Invitation to a Secret Event- Uncovering Earth Yako’s Campaigns

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Invitation to a Secret Event- Uncovering Earth Yako’s Campaigns

3. 16 February 2023

   Invitation to a Secret Event: Uncovering Earth Yako’s Campaigns

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Invitation to a Secret Event: Uncovering Earth Yako’s Campaigns

4. 25 January 2023

   JSAC2023_1_6_minakawa-saika-kubokawa_en.pdf

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor JSAC2023_1_6_minakawa-saika-kubokawa_en.pdf

5. 23 January 2023

   Invitation to Secret Event Uncovering campaigns targeting East Asia by Earth Yako

   file creation date Hara Hiroaki (TR-JP) fromORKL

   Archived copy on ORKL Detailsfor Invitation to Secret Event Uncovering campaigns targeting East Asia by Earth Yako

6. 11 May 2022

   Operation RestyLink- Targeted attack campaign targeting Japanese companies

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation RestyLink- Targeted attack campaign targeting Japanese companies

7. 11 May 2022

   Operation RestyLink: 日本企業を狙った標的型攻撃キャンペーン

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Operation RestyLink: 日本企業を狙った標的型攻撃キャンペーン

Newest first. Details opens the report in Explore.