#OceanLotus

I was alerted to this ESET paper (https://www.welivesecurity.com/wp-content/uploads/2018/03/ESET_OceanLotus.pdf) On page 15 (see screenshot) you can see that #OceanLotus uses DNS-based requests and encodes the name of the computer right the

NEW:#APT32/#OceanLotus is targeting dissidents, human rights workers and journalists across In a joint investigation with @zeitonline, we retraced their steps, did tons of technical work, spoke w/ affected people

Here is the english version of our investigation on #APT32/#OceanLotus, a group that is relentlessly targeting civil society. We're telling the stories of the people affected, of threat intel analysts