Analyzing Digital Quartermasters in Asia – Do Chinese and Indian APTs Have a Shared Supply Chain?

Anomali Labs analyzes a shared RTF phishing weaponizer used by Chinese and Indian state-aligned APT groups, finds shared object dimensions and post-exploitation techniques suggesting a common tool supply chain, and traces CVE usage (2017-11882, 2018-0802) across campaigns, with detection signatures and a timeline.