Carderbee

Symantec recently reported on activity attributed to a threat actor group dubbed Carderbee. In the campaign, the threat actors target entities in Hong Kong and other regions of Asia via a supply chain attack leveraging the legitimate Cobra DocGuard software. The activity began as early as September 2022.

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://blog.eclecticiq.com/chinese-state-sponsored-cyber-espionage-activity-targeting-semiconductor-industry-in-east-asia
• https://blog.polyswarm.io/carderbee-targets-hong-kong-in-supply-chain-attack
• https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/carderbee-software-supply-chain-certificate-abuse

Mənbə: MISP Galaxy, Malpedia.