Nullcon Berlin 2024 | How Things Are Going For APT41 In 2024 - Georgy Kucherin

Abstract

APT41 is a Chinese-speaking threat actor that has been observed to conduct both cyberespionage and financial theft campaigns.

During our talk, we will share information about a recent cyberattack that we analyzed in January 2024 and attributed to APT41. It targeted a game development company located in South Korea, and its analysis revealed various innovative tricks used by attackers. Firstly, we will discuss how the threat actor leveraged the network storage of the attacked organization to infect target machines. Afterwards, we will provide information about novel implants that were delivered over the course of this infection. Specifically, we will tell about unique techniques that were used to achieve persistence and perform defense evasion, as well as describe capabilities of the discovered malware. Finally, we will share practical tips that will help defenders to better protect against this threat actor.

#APT41 #CyberAttack #ThreatActor #Malware #cyberdefense

Know more - https://nullcon.net/berlin-2024/speak...
-----------------
Follow Nullcon on Facebook:   / nullcon  
X:   / nullcon  
LinkedIn:   / posts  
Website: https://nullcon.net/