Emerging Threats
Actor2018

APT32 Oceanlotus

1Rules
2References
1Folders
2023-09-28Latest
Summary

APT32 Oceanlotus is tracked here as a threat actor, intrusion set, or campaign with 1 Sigma detection spanning 2018. Coverage centers on windows / registry_event.

Related Detections
Search this threat
1 rulesInspect a rule without leaving your results.
criticaltestEmerging Threat

OceanLotus Registry Activity

Detects registry keys created in OceanLotus (also known as APT32) attacks

windowsregistry_event
2023-09-28
References