LABScon Replay | Chasing Shadows | The Rise of a Prolific Espionage Actor

This LABSCon presentation summary profiles a decade-long, highly sophisticated cyber espionage actor that has progressed from phishing and widespread malware distribution to tightly controlled, advanced tooling and loaders (ShadowPad, ScatterBee, Crosswalk/Sidewalk), supporting targeted operations across 35+ countries and multiple high-value sectors; the report highlights evolving execution techniques, relay/tunneling infrastructure, and the need for coordinated defensive measures.