Skip to content

halilozturkci/APT10-Threat-Analysis-Report-from-ADEO

Repository files navigation

APT10-Threat-Analysis-Report-from-ADEO

ADEO APT10 Threat Analysis Report

Since last year Iranian, Chinese and Russian threat groups have been aggressively targeting many regions across the world. One of their targets was Turkey. Although in 2019 we detected and responded to many instances of attacks, we noticed Chinese APT groups have had a particular interest in Turkey – targeting various critical sectors like Finance, Telecommunication.

This report explains the activities of a Chinese nation-state sponsored threat group dubbed as APT10 (a.k.a Stone Panda1, a.k.a menuPass2), how they gained access to the victim’s internal network, what their goal was and technical details such as their tactics they follow and tools they use to move laterally & exfiltrate data.