Web Bugs & the Tubthumping Tactics of Chinese Threat Actor TA416
DISCARDED: Tales From the Threat Research Trenches
00:00
TA416 Plug X: A Change in the Configuration Structure
The TA416 plug X has been around since roughly 2008. It was pretty interesting to look at because one of the first samples that I analyzed had hard-coded dates. And then next thing I know with the next sample, it was completely gone. So this group definitely has a lot of work put into their malware and they're pretty quick on their feet.
Play episode from 12:41
Transcript
