火眼mandiant-apt1-report.pdfVIP

APT1 Exposing One of China’s Cyber Espionage Units Contents Executive Summary 2 China’s Computer Network Operations Tasking to PLA Unit 61398 (61398部队) 7 APT1: Years of Espionage 20 APT1: Attack Lifecycle 27 APT1: Infrastructure 39 APT1: Identities 51 Conclusion 59 Appendix A: How Does Mandiant Distinguish Threat Groups? 61 Appendix B: APT and the Attack Lifecycle 63 Appendix C (Digital): The Malware Arsenal 66 Appendix D (Digital): FQDNs 67 Appendix E (Digital): MD5 Hashes 68 Appendix F (Digital): SSL Certificates 69