News Snapshot:
Many threat actors try to develop one or two highly effective attack-chains, then deploy these attack-chains with slight variations until mitigation measures render them ineffective. Meanwhile, 2022 saw TA444 deviate from its standard playbook to throw a large variety of different attack-chains at its targets to see what stuck. Beyond it’s standard opening move of distributing TA444 is an advanced persistent threat (APT) group believed to be associated with the North Korean government. However, rather than receiving financial backing from its government, the group seems to bring in revenue for the government. Unlike most state-backed APTs, such a China’s Aoqin...
