Double Dragon APT41, a dual espionage and cyber crime operation

[Winston M 2]

https://www.fireeye.com/content/dam/collateral/en/rpt-apt41-2019.pdf

 

Extra IOCs are welcomed. Also some heated discussions.

[Sherman Chu 8]

I can only imagine the clustering effort that was made behind the scenes of this report. 

The report is so detailed which allows other researchers to compare their own clustering. 

Furthermore, I appreciate that FE emphasized that the line between nation-state and cybercriminals can be blurry; it's never as clear cut as most people would like to categorize threat actors.