China Group Abuses Windows Policy
Read More: buff.ly/yUlYuGH

#LongNosedGoblin #ChinaAPT #CyberEspionage #GroupPolicyAbuse #LivingOffTheLand #CloudAbuse #NationStateThreats #ThreatIntel

LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan ESET researchers discovered a China-aligned APT group, LongNosedGoblin, which uses Group Policy to deploy cyberespionage tools across networks of governmental institutions.

#ESETresearch has discovered a new 🇨🇳-aligned APT group, #LongNosedGoblin. This group focuses on cyberespionage and targets mainly governmental entities in Southeast Asia and Japan. www.welivesecurity.com/en/eset-rese... 1/7

LongNosedGoblin APT Targets SE Asia & Japan Govs

~Eset~
New China-aligned APT targets governments in SE Asia & Japan, using Group Policy and custom malware like NosyDoor for espionage.
-
IOCs: 118. 107. 234. 29, 38. 54. 17. 131, 103. 159. 132. 30
-
#APT #LongNosedGoblin #ThreatIntel