LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoader
Multiple TTPs utilized in this campaign bear some overlap with North Korean APT groups.
A glimpse into the shadowy realm of a Chinese APT: detailed analysis of a ShadowPad intrusion – NCC Group Research
This post explores some of the TTPs employed by a threat actor who was observed deploying ShadowPad during an incident response engagement.
A glimpse into the shadowy realm of a Chinese APT: detailed analysis of a ShadowPad intrusion – NCC Group Research
This post explores some of the TTPs employed by a threat actor who was observed deploying ShadowPad during an incident response engagement.