Rare Backdoors Suspected to be Tied to Gelsemium APT Found in Targeted Attack in Southeast Asian Government

Threat activity targeting a Southeast Asian government could provide insight into the workings of APT Gelsemium. We examine the rare TTPs we observed in two attacks.

The post Rare Backdoors Suspected to be Tied to Gelsemium APT Found in Targeted Attack in Southeast Asian Government appeared first on Unit 42.

advanced url filtering apt attack attacks backdoor backdoors behavioral threat protection china chopper cl-sta-0046 cortex xdr cortex xsiam dns security found gelsemium government insight targeted attack targeting threat threat actors ttps web shells wildfire