Carderbee APT Strikes Hong Kong with Supply Chain Attack

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

The Carderbee advanced persistent threat (APT) group executed a supply chain attack by exploiting the legitimate Cobra DocGuard software. Their objective was to deploy the PlugX backdoor onto targeted organizations primarily situated in Hong Kong.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.