Linkedin Github

👋./Malfav.asm
- 🕸️Malfav Agenda
🕷️Malware Introduction
🐁OS Internal's
- 🍩Suspicious API's
🪟Windows Internal
- 📡Windows Internal
  - 🦐Why Windows Internal ?
    🏵️Process
    🧵Thread
    🪭Handle
    🌐Memory
    ☢️Ram
    🤖ROM
👁️‍🗨️Malware Technique
⚔️Malware Resources
- 👻Malware Resources
- 🎇Malware Sample Resources
Malware Analysis Toolkit
Books and Guidelines
- 🔋Books and Guidelines for Malware Analysis .
📋Malware Analysis Tips
- 🖇️Malware Analysis Tips
🧽Incident Response
- 🐳What is Incident Response
  - Incident Response Tools
  - Incident Response Toolkit
Technical Analysis Report
- 🦎Technical Analysis Report
  - 🧲Stuxnet Memory Analysis
🚨Rootkit Removal
- 🤖Rootkit Removal
🗜️Antivirus Artifact
- 〽️Antivirus Artifact
  - 🀄Antivirus Process Name
🧠Malware Author Mindset
- 💽Malware Author Mindset
  - 🍫How Malware Author Terminate Antivirus Process during runtime ?

Powered by GitBook

On this page

🕷️Malware Introduction

🏞️Advanced Persistence Threat - APT

🥠APT Groups

🇨🇳Winnti Group

Winnti Group is a threat group with Chinese origins that has been active since at least 2010. The group has heavily targeted the gaming industry, but it has also expanded the scope of its targeting.[1][2][3] Some reporting suggests a number of other groups, including Axiom, APT17, and Ke3chang, are closely linked to Winnti Group.[4]

PreviousWindshift NextWIRTE

Last updated 7 months ago

Page cover image