Naikon__2015__TheNaikonAPT-MsnMM1.pdf

**Executive summary:** This Kaspersky-style intelligence report documents the Naikon (MsnMM) APT campaign targeting ASEAN organizations and diplomats using CVE-2012-0158 and RTLO spear-phishing to deploy a family of backdoors (sslMM, winMM, sys10, xsPlus/naikon, rarstone, inject), second-stage reconnaissance tools (Honker/HDoor variants and legitimate admin utilities), and extensive C2/IOC lists (MD5s, domains, URLs), demonstrating focused geopolitical espionage with robust social-engineering and lateral-movement capabilities.