typhoon

china

GhostSpider: The Stealthy Modular Malware Threatening Global Telecommunications and Government Sectors

The investigation into 'GhostSpider' malware reveals it as a sophisticated, multi-modular backdoor used by the Chinese APT group known as Salt Typhoon..

typhoon

Threat Hunting Guide for Typhoon Threat Actors: A Comprehensive Handbook for Operations Teams

Typhoon actors employ "living-off-the-land" (LOTL) techniques, leveraging legitimate system tools like PowerShell, Windows Management Instrumentation (WMI), and Remote Desktop Protocol (RDP) for malicious purposes.