Dark Pink APT Group Strikes Government Entities in South Asian Countries

Executive Summary 

In February 2023, EclecticIQ researchers identified multiple KamiKakaBot malwares which are very likely used to target government entities in ASEAN (Association of Southeast Asian Nations) countries.

The latest attacks, which took place in February 2023, were almost identical to previous attacks reported by Group-IB on January 11, 2023 (1). In January 2023, the threat actors used ISO images to deliver KamiKakaBot, which was executed using a DLL side-loading technique. The main difference in the February campaign …

apt asean attacks countries dark dark pink dark pink apt dll eclecticiq entities executive february government group-ib images iso january kamikakabot latest malwares researchers south target threat threat actors