The Sin Digoo Affair

The Sin Digoo affair is a historical threat intelligence analysis of espionage malware activity centered on the Sin Digoo domains and the Enfal, RegSubsDat, and Murcy families, detailing domain registrations, domain-to-email links, victim infections and sinkholing results, connections to the RSA breach, and actor-investigation traces across online forums and leaked databases to illustrate a sophisticated, globally distributed espionage campaign.