APT_REPORT/Buhtrap

https://twitter.com/blackorbird

2019.7.24

recent sample：

8c74a1c1d1b116891373cba8b6bc4ea6

ad02a78839b7c0adc2e64362de4c75b0

2019.7.11

Buhtrap group uses zero‑day in latest espionage campaigns https://www.welivesecurity.com/2019/07/11/buhtrap-zero-day-espionage-campaigns/

2019.7.10

Windows zero‑day CVE‑2019‑1132 exploited in targeted attacks https://www.welivesecurity.com/2019/07/10/windows-zero-day-cve-2019-1132-exploit/

2019.3.19

Buhtrap新动向：针对俄罗斯、白俄罗斯金融机构的攻击活动 https://mp.weixin.qq.com/s/Y1aHEwU0NDwG-qfvtciU4w