Naikon__2020__Naikon_APT_Cyber_Espionage_Reloaded_-_Check_Point_Research.pdf

Check Point Research documents a revived Naikon APT campaign targeting APAC government entities using a bespoke backdoor called "Aria-body" delivered via RoyalRoad RTF, archive sideloading, and executables; the report covers loader and RAT technical analysis, DGA and C2 behaviors, infrastructure mappings (domains, IPs, ASNs), attribution evidence linking to previous Naikon/XsFunction activity, and an IOC appendix for detection and response.