APT12__2016__PWC_Taiwan-Presidential-Election-A-Case-Study-on-Thematic-Targeting_Mar-17-2016.pdf

This report documents multiple targeted spear‑phishing campaigns around the 2016 Taiwan presidential election that delivered distinct espionage malware families (EvilGrab, IXESHE/Etumbot/DynCalc/Numbered Panda, SunOrcal/Surtr). It contains behavioral analysis, persistence and execution chains (registry autorun, shortcuts, dropped binaries), network indicators (C2 IPs and domains, SSL cert metadata), file indicators (names and hashes), and attribution details linking samples to known APT activity targeting political figures and activists.