TLDR InfoSec · STRATEGIES & TACTICS

WICKED PANDA APT ADVERSARY SIMULATION

github.com5 min read

Summary from the TLDR InfoSec newsletter

This README explains a simulation of an attack by the Wicked Panda group targeting government networks. The attack involves stages like DodgeBox DLL loader and MoonWalk backdoor for data exfiltration via Google Drive API. The attackers use techniques like DLL sideloading and hashing to evade detection and establish communication channels.