New Activities of Patchwork APT in South Asia

Patchwork is a South Asian APT organization that has been active since December 2015. The organization has been conducting cyber attacks and stealing activities against the governments, medical care, scientific research and other fields of South Asian countries such as China and Pakistan for a long time.

REFERENCE: https://mp.weixin.qq.com/s/egG0nORZFvo_rCY_zmTgVQ

TAGS: Patchwork, PatchworkAPT, APT, South Asian, Patchinfecter, CVE-2021-40444, CAB

INDUSTRIES: Government, Healthcare

TARGETED COUNTRIES: China, Pakistan

MALWARE FAMILY: Patchwork

ATT&CK IDS: T1193 - Spearphishing Attachment, T1204.002 - Malicious File, T1434 - App Delivered via Email Attachment, T1210 - Exploitation of Remote Services, T1190 - Exploit Public-Facing Application, T1218.001 - Compiled HTML File, T1218 - Signed Binary Proxy Execution, TA0011 - Command and Control

Read More:

https://otx.alienvault.com/pulse/62fb7842bf18b81d35ac9efe