Interesting -- not targeting defense contractors or governments..<p>> <i>In this blog post, we introduce UNC3524, a newly discovered suspected espionage threat actor that, to date, heavily targets the emails of employees that focus on corporate development, mergers and acquisitions, and large corporate transactions. On the surface, their targeting of individuals involved in corporate transactions suggests a financial motivation; however, their ability to remain undetected for an order of magnitude longer than the average dwell time of 21 days in 2021, as reported in M-Trends 2022, suggests an espionage mandate.</i><p>Is there enough money in high finance to support the development of sophisticated tools to rig trading markets?
Did anyone ever decrypt that portion of Gauss, circa 2012?<p>That's the most effectively hidden malware code I know of.<p><a href="https://arstechnica.com/information-technology/2013/03/the-worlds-most-mysterious-potentially-destructive-malware-is-not-stuxnet/" rel="nofollow">https://arstechnica.com/information-technology/2013/03/the-w...</a>