APT40__2021__CSA_TTPs-of-Indicted-APT40-Actors-Associated-with-China-MSS-Hainan-State-Security-Department.pdf

- This Joint Cybersecurity Advisory (FBI & CISA, AA21-200A) documents APT40 (a PRC-affiliated APT) operations, detailing its tactics, techniques and procedures mapped to MITRE ATT&CK, known malware families and tools, extensive indicators of compromise (domains, file names, MD5 hashes), historical targeting and exfiltration of trade secrets, and recommended mitigations and detection steps; it also references a DOJ indictment of operators linked to Hainan Xiandun.