Billbug infests government agencies. [Research Saturday]

Brigid O. Gorman from Symantec's Threat Hunter Team joins Dave to discuss their report "Billbug - State-sponsored Actor Targets Cert Authority and Government Agencies in Multiple Asian Countries." The team has discovered that state-sponsored actors compromised a digital certificate authority in an Asian country during a campaign in which multiple government agencies were also targeted.
The research states they believe Billbug, which is a long-established advanced persistent threat (APT) group has been active since about 2009. They say "In activity …

actor advanced advanced persistent threat apt authority billbug campaign cert certificate certificate authority compromised countries dave digital digital certificate discuss government hunter persistent persistent threat report research sponsored state states symantec team threat