Can I read Winnti APT Targets Sri Lanka on EtoBox?

Winnti APT Targets Sri Lanka by edoardobachma is a document available to read on EtoBox.

What is Winnti APT Targets Sri Lanka about?

The document discusses a new attack targeting government entities in Sri Lanka that began in early August 2022. The attackers used multiple layers of protection and techniques to hide their final payload, which analysts believe is associated with the Chinese state-sponsored Winnti threat group based on TTPs and code similarities. The attack chain involved an ISO file masquerading as information about economic assistance that installed a backdoor called DBoxAgent, which communicated with Dropbox and download

Author

edoardobachma

Language

EN