Researchers Unmask Sandman APT’s Hidden Link to China-Based KEYPLUG Backdoor

December 11, 2023 at 09:12AM The enigmatic advanced persistent threat (APT) called Sandman and a China-based threat cluster are found to share tactical and targeting overlaps, utilizing a backdoor known as KEYPLUG. The assessment from SentinelOne, PwC, and Microsoft reveals shared infrastructure control, management practices, and design, suggesting joint functionalities. Alongside, the use of Lua-based … Read more