2022.02.15_ShadowPad

This commit is contained in:
cybermonitor 2022-02-16 10:29:30 +08:00
parent e494e4a732
commit b34b23f5ee
3 changed files with 2 additions and 1 deletions

@ -28,7 +28,8 @@ Please fire issue to me if any lost APT/Malware events/campaigns.
:small_blue_diamond: [vx-underground](https://vx-underground.org/apts.html) <br>
## 2022
* Feb 03 - [[Symantec] Antlion: Chinese APT Uses Custom Backdoor to Target Financial Institutions in Taiwan](https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/china-apt-antlion-taiwan-financial-attacks) | [:closed_book:](../../blob/master/2022/2022.02.03.Antlion_APT)
* Feb 15 - [[Dell] ShadowPad Malware Analysis](https://www.secureworks.com/research/shadowpad-malware-analysis) | [:closed_book:](../../blob/master/2022/2022.02.15_ShadowPad)
* Feb 03 - [[Symantec] Antlion: Chinese APT Uses Custom Backdoor to Target Financial Institutions in Taiwan](https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/china-apt-antlion-taiwan-financial-attacks) | [:closed_book:](../../blob/master/2022/2022.02.03.Antlion_APT)
* Feb 01 - [[Cybereason] PowerLess Trojan: Iranian APT Phosphorus Adds New PowerShell Backdoor for Espionage](https://www.cybereason.com/blog/powerless-trojan-iranian-apt-phosphorus-adds-new-powershell-backdoor-for-espionage) | [:closed_book:](../../blob/master/2022/2022.02.01.Phosphorus_APT)
* Jan 31 - [[CISCO] Iranian APT MuddyWater targets Turkish users via malicious PDFs, executables](https://blog.talosintelligence.com/2022/01/iranian-apt-muddywater-targets-turkey.html) | [:closed_book:](../../blob/master/2022/2022.01.31.MuddyWater_Turkish)
* Jan 31 - [[Symantec] Shuckworm Continues Cyber-Espionage Attacks Against Ukraine](https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/shuckworm-gamaredon-espionage-ukraine) | [:closed_book:](../../blob/master/2022/2022.01.31.Shuckworm_APT)

Binary file not shown.