Naikon__2021__Bitdefender-PR-Whitepaper-NAIKON-creat5397-en-EN.pdf

Bitdefender Labs documents a multi-year (Jun 2019–Mar 2021) cyber-espionage campaign attributed to the NAIKON APT targeting Southeast Asian military organizations; actors used DLL sideloading and SFX droppers to deploy the RainyDay backdoor and a secondary Nebulae backdoor, executed credential-dumping, network scanning and automated exfiltration (including Dropbox uploads), and maintained persistence via services, scheduled tasks and registry Run keys — the report provides technical analysis, MITRE ATT&CK mappings and numerous IOCs (file hashes, domains, IPs) to support detection and response.