Pulse Report: New APT32 Malware Campaign Targets Cambodian Government

Recorded Future's Insikt Group reports a new APT32 (OceanLotus) campaign targeting Cambodian government organizations using ASEAN-themed spearphishing; the malware is delivered via self-extracting archives that sideload a malicious DLL which extracts and executes encrypted shellcode, and researchers provide active C2 IPs/domains, multiple malware hashes, and a YARA rule to aid detection.