Down-the-GRAYRABBIT-hole-exposing-UNC3569-and-its-modus-operandi.pdf
Excerpt
2 VIRUS BULLETIN CONFERENCE OCTOBER 2024
ABSTRACT
In this paper we provide an in-depth analysis of UNC3569, a prolific and sophisticated threat actor operating within the Chinese cybercriminal and cyber contractor-for-hire ecosystem, mostly operating out of China. UNC3569 consistently exploits known vulnerabilities in widely used software to infiltrate organizations across a wide range of industries worldwide. The group’s activities are not limited to…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Virus Bulletin on virusbulletin.com.
Mentioned in the excerpt
More from Virus Bulletin10
- Google-Calendar-as-C2-infrastructure-a-China-nexus-campaign-with-stealthy-tactics.pdfVirus Bulletin · Added 24 Mar
- DeceptiveDevelopment-and-North-Korean-IT-workers-from-primitive-crypto-theft-to-sophisticated-AI-based-deception.pdfVirus Bulletin · Added 16 Oct 2025
- Sugarcoating-KANDYKORN-a-sweet-dive-into-a-sophisticated-MacOS-backdoor.pdfVirus Bulletin · Added 15 Jan 2025
- The-Mask-has-been-unmasked-again.pdfVirus Bulletin · Added 17 Dec 2024
On the same topics
- ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoftMandiant (Google) · Published 25 Sep
- TA488 Targets Zimbra Mailservers with Half-Click ExploitsProofpoint · Published 15 Jul
- Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukrainebluecyber.hashnode.dev · Published 22 Jul
- DragonBreath: Dragon in the Kernelransom-isac.com · Published 22 Apr
