MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan

China-linked threat actor MirrorFace, or Earth Kasha, has been conducting cyberattacks on Japan since 2019, aiming to steal information related to national security and advanced technology. The attacks, categorized into three campaigns, utilize spear-phishing, exploiting vulnerabilities, and Visual Studio Code remote tunnels to deliver malware like ANEL, NOOPDOOR, and LODEINFO.