OVERRULED: Containing a Potentially Destructive Adversary
FireEye assesses APT33 may be behind a series of intrusions and
attempted intrusions within the engineering industry. Public reporting
indicates this activity may be related to recent destructive attacks.
Defense has responded to and contained numerous intrusions that we
assess are related. The actor is leveraging publicly available tools
in early phases of the intrusion; however, we have observed them
transition to custom implants in later stage activity in an attempt to
circumvent our detection.
On Sept. 20, 2017, FireEye Intelligence publishe...