【図表】
【概要】
■使用ツール
| Fin6 | - | RmaRat, Ammyy, Meterpreter |
| Fin7 | - | Beacon, PowerSource, Ammyy |
| Fin9 | - | NetWire |
| Fin10 | - | Empire, Meterpreter |
| APT10 | Menupass | QuaserRat, GhostRat |
| APT17 | Tailgater | Aspxspy |
| APT18 | Wekby | Ghost RAT |
| APT19 | Codoso | Beacon, Empire, Meterpreter |
| APT20 | Twivy | Aspxspy |
| APT24 | Temp.Pittytiger | GhostRat |
| APT27 | Aspxspy | |
| APT28 | Tsar | Meterpreter |
| APT32 | OceanLotus | Beacon |
| APT33 | Beacon, Video Game | |
| APT35 | NewsCaster | Beacon, Video Game, Hi-Tech |
【資料】
◆Nowhere to Hide: Intelligence Illuminating the Threat (FireEye, 2019)
https://www.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/keynote-cds19-sandra-joyce.pdf
【関連まとめ記事】
◆全体まとめ
◆攻撃組織 / Actor (まとめ)
◆標的型攻撃組織 / APT (まとめ)
◆APT20 / APT8 (まとめ)
https://malware-log.hatenablog.com/entry/APT20
