Royal_APT

RoyalAPT Royal APT - APT15 - 来自 NCC Group 网络防御行动研究的相关信息 Sharepoint 工具 在该组织为受害者开发的工具中，APT15 创建了一个 .net 工具，用于枚举受害者的 sharepoint 数据库。以下是反编译二进制文件的截图。 解码脚本 NCC Group 发现的 BS2005 和 RoyalCLI 样本的解码脚本可在 scripts 目录中找到。 BS2005 bsdecoder.py 将提取并解密发送至样本...

Ke3chang APT Linked to Previously Undocumented Backdoor

The Ke3chang cyberespionage group, a.k.a. APT15, Mirage, Playful Dragon or Vixen Panda, has been tied to a backdoor called Okrum that has been used to target diplomatic missions throughout Europe and Latin America. The attribution widens the scope of known Ke3chang activity, an APT believed to be...