PowerPoint 簡報
Excerpt
Evolution after prosecution
: Psychedelic APT41
Aragorn Tseng Charles Li Peter Syu Tom Lai
Malware Analysis
Incident Response
Threat Intelligence
Malware Analysis
Incident Response
Tool Development
Incident Response
Malware Analysis
Penetration
Malware Analysis
Threat Hunting
Threat Intelligence
Who we are
2
AGENDA
01
02
03
04
05
Initial Access
Cobalt Strike Loader
APT41’s Backdoor
C2 Hiding Technique
Relation to other operations
06 Takeaway
The content of APT41 in this
talk is mainly from
2020/9 to 2021/8
Evolution after prosecution: Psychedelic APT41
Target Country Talk in last section
5
Target Industry
High-techHealthcare Airlines
Financial ResearchGovernment
Media
Gaming
Telecom
EnergyEducation
Manufacturing
6
New TTP
◆…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by vblocalhost.com on vblocalhost.com.
Mentioned in the excerpt
More from vblocalhost.com1
- VB2020 paper: SilentFade: unveiling a malware ecosystem that targeted the Facebook ad platformvblocalhost.com · Added 22 Jul 2025
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Animal Farm APT and the Shadow of French IntelligenceInfosec Institute · Published 8 Jul 2015
- Darktrace Malware Analysis: Unpacking SnappyBeeDarktrace · Published 3 Feb