A fight to defend Taiwan financial institutions. [Research Saturday]

Alan Neville from Symantec/Broadcom joins Dave Bittner on this episode to discuss Antlion, a Chinese state-backed hacker group, are using custom backdoors to target financial institutions in Taiwan. Symantec's blog shares the research behind the attacks and how the backdoor allowed the attackers to run WMI commands remotely.
Symantec's research showed that "The goal of this campaign appears to have been espionage, as we saw the attackers exfiltrating data and staging data for exfiltration from infected networks." They have since …

alan antlion attackers attacks backdoor backdoors blog broadcom chinese dave discuss financial financial institutions hacker hacker group institutions research run state symantec taiwan target wmi