Researchers Unmask Sandman APT's Hidden Link to China-Based KEYPLUG Backdoor
Researchers Unmask Sandman APT's Hidden Link to China-Based KEYPLUG Backdoor
11 December 2023
Tactical and targeting overlaps have been discovered between the enigmatic advanced persistent threat (APT) called Sandman and a China-based threat cluster that's known to use a backdoor known as KEYPLUG.
The assessment comes jointly from SentinelOne, PwC, and the Microsoft Threat Intelligence team based on the fact that the adversary's Lua-based malware LuaDream and KEYPLUG have been