GINC-APT-0889 · Targeted, sponsor unknown

PerSwaysion

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Vietnam(high confidence)
Sources
3 sources carry it
Identifier
GINC-APT-0889 · perswaysion

What it is

PerSwaysion is a threat actor known for conducting phishing campaigns targeting high-level executives. They have been active since at least August 2019 and are believed to be based in Vietnam. PerSwaysion has recently updated their techniques, using more direct phishing methods and leveraging Microsoft 365 to steal credentials.

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de