Night_Dragon__2011__wp-global-energy-cyberattacks-night-dragon.pdf

McAfee’s 2011 whitepaper "Night Dragon" documents a multi-year, targeted cyberespionage campaign against global energy-sector organizations that used SQL injection, spear‑phishing, compromised VPNs and a custom RAT (zwShell) to pivot, harvest credentials, and exfiltrate sensitive emails and documents; the report provides host and network IOCs (registry keys, DLL names, C2 beacon signatures, dynamic DNS domains), attacker attribution indicators pointing to China-based infrastructure, and detailed detection and remediation guidance.