Qianxin_2023_APT_Report.pdf (15 MB)

QiAnXin's 2023 APT annual-report page highlights the group's practice of publishing research based on internal security telemetry, operational cases, market research, and third-party cooperation. The excerpt introduces Caracal Kitten, a newly named APT-Q-58 cluster that used malicious mobile applications disguised as Kurdistan Democratic Party-related apps. QiAnXin assessed the actor as probably backed by a Middle Eastern state and said the malware targeted KDP activists to steal contacts, SMS messages, and social-application data.