CriticalAPT
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Securelist (Kaspersky)·Source published ·1 min read
What happened?
Introduction A couple of months ago, our research revealed a highly sophisticated infection chain and a complex.NET assembly-loading framework built on XAML markup, which strongly indicates a supply-chain attack targeting a custom Windows build used exclusively by government entities in Asia. The malicious framework has been labeled NetamLoader; at present, no attribution to any known APT group has been established.