Analysis of the APT31 indictment

The U.S. Department of Justice released an indictment of seven hackers associated with APT31 a hacking group supporting Chinas Ministry of State Security active for 14 years. The indictment reveals APT31 tradecraft including front companies malware like RAWDOOR two-phase attacks via email tracking then exploitation compromising subsidiaries for access and quickly shifting targets based on political events.