YARA Signature Match - THOR APT Scanner
RULE: APT_CN_MAL_Compromised_Certs_May21_1
RULE_SET: Livehunt - China23 Indicators
RULE_TYPE: VALHALLA rule feed only
RULE_LINK:
Rule Info APT_CN_MAL_Compromised_Certs_May21_1 - Valhalla
DESCRIPTION: Detects compromised certificates used by a Chinese threat group between February and May 2021
REFERENCE:
VirusTotal
RULE_AUTHOR: Florian Roth
Detection Timestamp: 2023-10-14 11:15
AV Detection Ratio:
0 / 71
Use these tags to search for similar matches: #apt #compromised #certs #apt_cn_mal_compromised_certs_may21_1
More information:
Notes on VirusTotal Matches - Nextron Systems