5min chapter

The Defender's Advantage Podcast cover image

Threat Trends: APT by USB

The Defender's Advantage Podcast

CHAPTER

What's Happened With UNK 4191?

Most of the physical systems were located in the Philippines. UNK 4191 was using three brand new malware families that we'd never seen before to kind of conduct this campaign, which was pretty interesting for us. There's three primary code families at this infection chainpretty much relies on. Eschlei: Where do they go from there? The PDB is the project database for a malware sample. And in this case, it was really interesting because not only did they have some Chinese characters that translated to disk hijacking in there, they had APT in the in the, in the folder name.

00:00

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode