Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
13 IOCs
Operation GriefLure: Dissecting an APT Campaign Targeting Vietnam’s Military Telecom & Philippine Healthcare
Excerpt
Table of Contents: Introduction: Key Targets: Infection Chain: Initial Findings about Campaign: Analysis of Decoys: Technical Analysis: Campaign-1: Stage-1: Ho so.rar Campaign: 2 Stage-1: download.zip Stage-2: The LNK & Batch file (Common in 1 & 2 both) Stage-3: Analysis of sfvc.exe & 360.dll Analysis of 2 nd Infrastructural Artefacts & Threat actor Attributions. Conclusion: Why Operation GriefLure ? Seqrite Coverage: IOCs: MITRE ATT&CK: Introduction:…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability
Victim
Indicators of Compromise
Open the mindmap →13 indicators
IOC Relationship Graph
Building graph…