PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The iSOON Disclosure: Exploring the Integrated Operations Platform

bishopfox.com | blog | #threat-intelligence | #apt | #data-leak | #china | #cyber-espionage | #integrated-operations-platform
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox analyzes leaked iSoon (Auxun) documents, highlighting a 44-page whitepaper on an integrated operations platform for cyber campaigns—mission management, operator rewards, evasion features.
Published
Collected

Related coverage

vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
vulnerability · volexity.com
Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence
In the world of information security, there is never a dull moment. Part of the fun of working in this space is that you always get to see attackers do […]
vulnerability · volexity.com
APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)
As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]
research · hunt.io
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
research · volexity.com
Evil Eye Threat Actor Resurfaces with iOS Exploit and Updated Implant
In September 2019, Volexity published Digital Crackdown: Large-Scale Surveillance and Exploitation of Uyghurs, which described a series of attacks against Uyghurs from multiple Chinese APT actors. The most notable threat […]
vulnerability · volexity.com
Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
If your organization is running an Internet-facing version of ColdFusion, you may want to take a close look at your server. Volexity recently observed active exploitation of a newly patched […]
Back