GINC-APT-0979 · Tracked, unattributed

Swan Vector

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0979 · swan-vector

What it is

Seqrite Labs APT-Team has recently uncovered a campaign which we have termed as Swan Vector, that has been targeting the nations across the East China sea such as Taiwan and Japan. The campaign is aimed at educational institutes and mechanical engineering industry with lures aiming to deliver fake resume of candidates which acts as a decoy.

Tools

The tools and malware families the sources tie to it.

  • China Chopper
  • CrossRat

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de