Tick__2023__ESET_Tick-APT-compromise-DLP-developer-East-Asia_03-14-2023.pdf

ESET researchers describe a Tick APT campaign against an East Asian DLP software vendor, where compromised internal update servers delivered trojanized installers, enabling ShadowPy, Ghostdown, and Netboy malware to run on the developer’s network and on two customer environments, with the operation targeting sensitive information for cyberespionage.