# APT_REPORT collected by @blackorbird https://twitter.com/blackorbird 
Interesting apt report collection


### Group123

▶ group123 APT organization, 'Operation High Expert'
https://blog.alyac.co.kr/2226
(April 2 , 2019)

▶ Rocketman APT Campaign Returned to Operation Holiday Wiper
https://blog.alyac.co.kr/2089
(Jan 23, 2019)

▶ 'Operation Blackbird', the mobile invasion of the '
https://blog.alyac.co.kr/2035
(Dec 13, 2018)

▶ group123 'Operation Korean Sword' is underway
https://blog.alyac.co.kr/1985
(Nov. 16, 2018)

▶ group123 Group's latest APT campaign - 'Operation Rocket Man'
https://blog.alyac.co.kr/1853
(Aug. 22, 2018)

▶ group123, Flash Player Zero-Day (CVE-2018-4878) Attack Attention
https://blog.alyac.co.kr/1521
(Feb 02, 2018)

▶ 'group123' group 'survey on the total number of discovery of separated families in North and South'
https://blog.alyac.co.kr/1767
(July 28, 2014)

▶ Rocketman APT campaign, 'Operation Golden Bird'
https://blog.alyac.co.kr/2205
(March 20, 2013)

### baby related kimsuky

▶Operation Giant Baby, a giant threat (March 28, 2019)
https://blog.alyac.co.kr/2223

▶ Malicious code installed with coin purse program(Alibaba) (March 15, 2019)
https://asec.ahnlab.com/1209

▶ New BabyShark Malware Targets U.S. National Security Think Tanks (Feb. 22, 2019)
https://unit42.paloaltonetworks.com/new-babyshark-malware-targets-u-s-national-security-think-tanks/

▶ Korea's latest APT attack, Operation Mystery Baby Attention! (Feb 11, 2018)
https://blog.alyac.co.kr/1963

▶ Returned to Korea as Operation Baby Coin, APT attacker, overseas target in 2010 (Apr. 19, 2014)
https://blog.alyac.co.kr/1640



### kimsuky

▶ Kimsuky Organization, Operation Stealth Power Silence Operation (April 3 , 2019)
https://blog.alyac.co.kr/2234

▶ Kimsuky Organization, Watering Hole Started "Operation Low Kick"(March 21, 2019)
https://blog.alyac.co.kr/2209

### Oceanlotus
▶ OceanLotus Steganography Malware Analysis White Paper (April 2 , 2019)
https://threatvector.cylance.com/en_us/home/report-oceanlotus-apt-group-leveraging-steganography.html


### APT28
▶ CB TAU Threat Intelligence Notification: Hunting APT28 Downloaders  (April 5 , 2019)
https://www.carbonblack.com/2019/04/05/cb-threat-intelligence-notification-hunting-apt28-downloaders/

### tick

▶ tick group new campaign, attack north korean and japan
https://www.ahnlab.com/kr/site/securityinfo/secunews/secuNewsView.do?curPage=1&menu_dist=2&seq=28186
(April 1 , 2019)
