The Taidoor Campaign: An In-Depth Analysis

This Trend Micro research paper analyzes the Taidoor APT campaign, describing targeted attacks against primarily Taiwanese government entities, the use of phishing emails with malicious attachments, multiple CVEs exploited, the SIMBOT family of malware with C2 via HTTP/RC4, persistence and data-exfiltration capabilities, and a range of indicators and defenses for detection and mitigation.