Botconf2022-19-FaouCoteCyr.pdf

TA410: APT10's

distant cousin

Alexandre Côté Cyr | Malware Researcher

Matthieu Faou | Senior Malware Researcher

bi

”. SMOKESCREEN SUPPLY CHAIN

) ATTACK TARGETS

TAIWAN FINANCIAL SECTOR

Smokescreen Supply Chain Attack Targets

Taiwan Financial Sector, A Deeper Look

Operation Cache Panda: Zero-Day in Financial Software Exploited by China-Linked Threat Group

Valentine’s Day this year saw the end of a truly toxic relationship — a prolonged supply chain attack targeting the Taiwan financial and securities trading sector that had begun back in November 2021. Evidence uncovered during a CyCraft incident response (IR) investigation ties these attacks to APT10 — a China state-incident response (IR) investigation ties these attacks to APT10 — a China state-sponsored hacker group widel…