RESOURCES

A new APT group was found very active in the first half of 2021. It has strong penetration capabilities and is good at borrowing the attack methods and network facilities of other active hacker organizations to launch unique downloaders and spy Trojan programs through spear phishing and watering hole sites.

NSFOCUS Security Labs named the group Lorec53 based on the characteristic information. In this report, we introduce Lorec53’s activities and characteristics, and disclose the group’s attack activities in chronological order.