Government and Military Organizations Persistently Targeted by Dark Pink Hackers
Dark Pink APT hacking group remains highly active, targeting government, military, and education organizations in Indonesia, Brunei, and Vietnam. Their recent attacks show a revamped chain, new persistence mechanisms, and updated data exfiltration tools. Dark Pink splits functionalities and loads implants from memory to evade detection. They utilize spear-phishing emails, DLL side-loading, and private GitHub repositories. The group propagates through SMB shares and exploits legitimate software. They diversify data exfiltration methods, including Telegram, Dropbox, and HTTP uploads. Dark Pink persists despite exposure, expected to update and diversify further.
