Oceanlotus
APT32-Graph-Deobfuscator.py come from checkpoint
https://research.checkpoint.com/deobfuscating-apt32-flow-graphs-with-cutter-and-radare2/
Analysis report on the attack on mobile devices by Oceanlotus https://mp.weixin.qq.com/s/L-tCvLPOOMhP0ndgdqhkNQ
Oceanlotus Linux Backdoor
https://blog.netlab.360.com/rotajakiro_linux_version_of_oceanlotus/