Deep-dive: The DarkHotel APT
ID: 296af9df-67d3-5020-8b36-c7ebca745e2c
STIX ID: report--296af9df-67d3-5020-8b36-c7ebca745e2c
Feed Name: BushidoToken Blog
Threat Score
The report profiles DarkHotel and two related Korean-speaking APTs (StarCruft/ScarCruft and Higaisa), detailing their sophisticated cyber-espionage operations which leverage zero-day browser/Windows exploits, stolen certificates, and targeted lures (hotel Wi‑Fi, COVID‑19 themes) to deliver backdoors (Gh0st RAT, Ramsay, Retro) and data-stealing tooling across government, corporate, and diplomatic targets in Asia and beyond.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.