Executive summary

• In early 2023, the Check Point Incident Response Team (CPIRT) team investigated a malware incident at a European healthcare institution involving a set of tools mentioned in the Avast report in late 2022. The incident was attributed to Camaro Dragon, a Chinese-based espionage threat actor whose activities overlap with activities tracked by different researchers as Mustang Panda and LuminousMoth, whose focus is primarily on Southeast Asian countries and their close peers.


• The malware gained access to the …

actor avast beyond check check point chinese drives espionage executive flash healthcare horizon incident incident response incident response team malware point report response team threat threat actor tools usb world