APT32__2019__OceanLotus_Attacks_to_Indochinese_Peninsula.pdf

This QiAnXin / RedDrip threat intelligence report documents OceanLotus (APT-C-00) operations against Indochinese targets since 2018, detailing phishing with weaponized Office macros and template injection, exploitation of EternalBlue and WinRAR flaws, custom Windows droppers (DLL hijacks, in-memory loaders, Cobalt Strike modules) and macOS backdoors disguised as browser installers; the report includes technical analysis, sample behaviors, attack workflows and a long list of domains, file hashes and other IOCs to support detection and response.