TLDR InfoSec · STRATEGIES & TACTICS
WICKED PANDA APT ADVERSARY SIMULATION
Summary from the TLDR InfoSec newsletter
This README explains a simulation of an attack by the Wicked Panda group targeting government networks. The attack involves stages like DodgeBox DLL loader and MoonWalk backdoor for data exfiltration via Google Drive API. The attackers use techniques like DLL sideloading and hashing to evade detection and establish communication channels.