Threat Group-3279 Targets the Video Game Industry | Secureworks

Dell SecureWorks CTU analyzes Threat Group-3279, a likely China-linked cracking group active since ~2009 that targets video game companies to steal source code and build cheats; the report catalogs custom malware (Conpee, Etso), loaders (XT, Runxx), rootkit techniques, C2 evasion (IP calculations, domain parking), actor profiles (Laurentiu Moon, Sincoder), IOCs (domains, IPs, emails), and recommends detection/mitigation measures.