FireEye Examines Operations of APT 30 Threat Group; Dan McWhorter Comments

FireEye said an advanced persistent threat group known as APT 30 has been targeting corporations and government entities in India, Malaysia, Vietnam, Thailand, Nepal, Singapore, the Philippines and Indonesia since 2005.

According to FireEye’s report, the Chinese government is the likely sponsor of APT 30, which the company says has maintained its attack tools, tactics and procedures since the threat group began operations.

Dan McWhorter, vice president of threat intelligence at FireEye, said Sunday the company intends for the intelligence report on APT 30 to help governments and businesses “detect, prevent, analyze and respond to this established threat.”

“Advanced threat group[s] like APT 30 illustrate that state-sponsored cyber espionage affects a variety of governments and corporations across the world,” added McWhorter.

FireEye noted that APT 30 uses a malware development approach similar to how established technology businesses develop software.