APT41__2019__Recent_InPage_Exploits_Lead_to_Multiple_Malware_Families.pdf

Unit42 documents recent targeted InPage (.inp) exploits that deploy multiple custom malware families (CONFUCIUS_B, BioData, MY24). The report provides detailed shellcode and payload analysis, IOCs (hashes, C2 domains, IPs), YARA rules, persistence and network behaviors, and demonstrates active exploitation targeting politically or militarily motivated victims.