Tropic Trooper's Silent Attack: A Destructive Cyber Campaign Against Human Rights Organizations

<p><b>Summary of Actor</b>:Pirate Panda, also known as APT 23, is a Chinese state-sponsored cyber espionage group. They have been active since at least 2009, primarily targeting entities in the defense, aerospace, and high-tech sectors.</p><p><b>General Features</b>:Pirate Panda is known for its sophisticated spear-phishing campaigns and custom malware development. They often use zero-day exploits and are adept at maintaining long-term access to compromised networks. Their operations are typically aligned with Chinese political and economic interests.</p><p><b>Related Other Groups</b>: APT10,APT1,Stone Panda</p><p><b>Indicators of Attack (IoA)</b>:</p><ul><li>Use of spear-phishing emails with malicious attachments</li><li>Deployment of custom malware like IXESHE, Etumbot</li><li>Use of compromised legitimate websites for watering hole attacks</li></ul><p></p><p><b>Recent Activities and Trends</b>:</p><ul><li><b>Latest Campaigns </b>: Recent campaigns have involved targeting defense contractors with spear-phishing emails containing malicious document attachments. They've also been observed leveraging vulnerabilities in Microsoft Office and Adobe Flash Player to gain initial access.</li><li><b>Emerging Trends </b>: There is an increasing use of fileless malware techniques and advanced obfuscation methods to evade detection. Additionally, Pirate Panda has been seen aligning more closely with Chinese Belt and Road Initiative targets, suggesting a strategic pivot.</li></ul><p></p>