Unveiling Patchwork

Patchwork documents a worldwide, deception-driven APT operation that infected thousands of targets, using copy-paste code, spearphishing PPS files exploiting Sandworm, a staged malware deployment with Meterpreter, and Cymmetria MazeRunner deception campaigns to study attacker behavior and lateral movement.