as-21-Kuo-We-Are-About-To-Land-How-CloudDragon-Turns-A-Nightmare-I_2d4Ribw.pdf (11 MB)

The CloudDragon report describes an APT intrusion playbook built around supply-chain compromise, phishing, and mobile targeting. The presentation highlights malware and tooling associated with the activity, including JamBog or AppleSeed, DongMulRAT, GoldDragon variants, FlowerPower, and NavRAT-related capabilities. It frames the campaign as a multi-stage threat that uses social engineering and compromised software channels to reach targets before deploying payloads and collecting intelligence from victim systems.