Bitter APT Enhances Its Capabilities With Windows Kernel Zero-day Exploit

Also called T-APT-17, the Bitter APT group is suspected to be a state-sponsored APT group targeting countries such as Saudi Arabia, China, and Pakistan. This group was first discovered by Forcepoint Security Labs and has been active since 2013 with targets including the Energy, Engineering, and Government sectors.  The Bitter APT group primarily uses tools such as ArtraDownloader and BitterRAT, along with techniques like Spear phishing …

Bitter APT Enhances Its Capabilities With Windows Kernel Zero-day Exploit Read More »