Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
37 IOCs
Operation DragonReturn: China-Nexus Cyber Espionage Campaign Targeting Govt. of India/MoF Tax Infrastructure via Multi-Stage DcRAT Deployment
Excerpt
Authors: Dixit Panchal & Soumen Burma Table of Contents: Introduction: Key Targets: Infection Chain: Initial Findings about Campaign: Initial Mail: Email Attachment: Lure: Official GoI, Income Tax Document: Technical Analysis: Infrastructural Artefacts & Threat actor Attributions. Campaign Timeline. Conclusion: Seqrite Coverage: IOCs: MITRE ATT&CK: Introduction: Seqrite Lab actively tracks and analyse threat actors and their campaigns, focusing on attribution,…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability
Victim
Indicators of Compromise
Open the mindmap →37 indicators
IOC Relationship Graph
Building graph…