Onion Dog, A 3 Year Old APT Focused On the Energy and Transportation... -- BEIJING, March 8, 2016 /PRNewswire/ --

360 SkyEye Labs' Helios Team published a report exposing "OnionDog," a multi-year APT that targeted energy, transportation and other infrastructure in Korean-language countries using Hangul (HWP) file vulnerabilities, spear-phishing, and USB-worm propagation to breach air-gapped networks; the group also hid C2 infrastructure using Tor/OnionCity, maintained short-lived malware campaigns (average ~15 days), and left indicators including ~96 malware samples and 14 C2 domains/IPs.