The Naikon APT

This report profiles the Naikon APT, a long-running Asia-Pacific cyber espionage campaign that has targeted government and civil/military organizations across ASEAN and China, describing its infrastructure, toolset (backdoor, builder, exploit builder), victim management software XSControl, C2 networks and proxy usage, and the interaction with other threat actors, illustrating a sophisticated, geo-targeted operation with sustained activity since 2010.