APT_REPORT

APTREPORT 由 @blackorbird 收集 https://x.com/blackorbird 收集有趣的 APT 报告 & 样本 & 恶意软件 & 技术 & 情报 按国家/地区划分的 APT 组织 Palo Alto Networks Unit 42 追踪的威胁行为者组织 https://unit42.paloaltonetworks.com/threat-actor-groups-tracked-by-palo-alto-networks-unit-42/ 样本 Group123 ▶ScarCruft 持续演进，引入蓝牙收集器...

ScarCruft APT Adds Bluetooth Harvester to its Malware Bag of Tricks

The ScarCruft Korean-speaking APT is changing up its espionage tactics to include an unusual piece of malware devoted to harvesting Bluetooth information – while also showing some overlap with the DarkHotel APT. An analysis of ScarCruft’s binary infection procedure by Kaspersky Lab shows that in ...

ScarCruft continues to evolve, introduces Bluetooth harvester

Executive summary After publishing our initial series of blogposts back in 2016, we have continued to track the ScarCruft threat actor. ScarCruft is a Korean-speaking and allegedly state-sponsored threat actor that usually targets organizations and companies with links to the Korean peninsula. Th...