PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Chiến dịch tấn công mới của nhóm Lotus Blossom: Kỹ thuật Domain Fronting và Lợi dụng các hệ thống quản trị tập trung (Phần 1)

blog.viettelcybersecurity.com | blog | #phishing | #apt | #vpn | #southeast-asia | #lotus-blossom | #domain-fronting
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Vietnamese Part 1 overviews the Lotus Blossom APT, active in Southeast Asia since 2012, now using leaked VPN accounts, OTT-app phishing, abused IT management systems, and Domain Fronting to hide C2.
Published
Collected

Related coverage

blog · blog.viettelcybersecurity.com
Lotus Blossom's New Attack Campaign: Domain Fronting and Abusing Centralized Domain Management (Part 1)
Part 1 of the English Lotus Blossom series overviews the APT active in Southeast Asia since 2012: leaked VPN accounts, OTT-app phishing, abused IT management systems, and Domain Fronting to hide C2.
blog · blog.viettelcybersecurity.com
Chiến dịch tấn công mới của nhóm Lotus Blossom: Kỹ thuật Domain Fronting và Lợi dụng các hệ thống quản trị tập trung (Phần 2)
Part 2 of Viettel's Lotus Blossom series explains Domain Fronting, showing how attackers abuse CDN behavior to make C2 traffic resemble legitimate connections by mismatching TLS SNI and Host headers.
blog · blog.viettelcybersecurity.com
Lotus Blossom's New Attack Campaign: Domain Fronting and Abusing Centralized Domain Management (Part 2)
English Part 2 of the Lotus Blossom series explains Domain Fronting: how abusing CDN behavior and mismatching TLS SNI with the Host header lets C2 traffic look like legitimate connections.
research · volexity.com
Suspected APT29 Operation Launches Election Fraud Themed Phishing Campaigns
On May 25, 2021, Volexity identified a phishing campaign targeting multiple organizations based in the United States and Europe. The following industries have been observed being targeted thus far: NGOs […]
vulnerability · volexity.com
Patchwork APT Group Targets US Think Tanks
In March and April 2018, Volexity identified multiple spear phishing campaigns attributed to Patchwork, an Indian APT group also known as Dropping Elephant. This increase in threat activity was consistent […]
research · volexity.com
PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs
In the wake of the 2016 United States Presidential Election, not even six hours after Donald Trump became the nation’s President-Elect, an advanced persistent threat (APT) group launched a series […]
Back