wen6912

反恶意代码爱好者，安天技术发言人—Anti-malicious code enthusiast,Technical tiny speaker from Antiy Labs.

[wen6912 @wen6912]

https://t.co/gwF4b4KLgC

[wen6912 @wen6912]

Updated:
Software Supply Chain Security Challenge under TeamPCP cyberattack footage
https://t.co/532i5mZd0q

[wen6912 @wen6912]

https://t.co/MsbCNXmSKr

[wen6912 @wen6912]

https://t.co/gGVsuxE7pM

[wen6912 @wen6912]

Updated:
Software Supply Chain Security Challenge under TeamPCP cyberattack footage
https://t.co/532i5mZd0q

[wen6912 @wen6912]

https://t.co/MsbCNXmSKr

[wen6912 @wen6912]

https://t.co/mLsQHbdyHF

[wen6912 @wen6912]

https://t.co/MsbCNXmSKr

[wen6912 @wen6912]

https://t.co/vCdhJcilJj

[wen6912 @wen6912]

https://t.co/ZIW8imdIGW

[wen6912 @wen6912]

https://t.co/VEXVEfqQXW

[wen6912 @wen6912]

https://t.co/B0kTBASmgf

[wen6912 @wen6912]

https://t.co/vVDWJ6iRKU

[wen6912 @wen6912]

https://t.co/uWzP7ZymFX

[wen6912 @wen6912]

https://t.co/HHBOpNLvFQ

[wen6912 @wen6912]

Errata Note on the English AI Version of Antiy Report

In the above English report, Dakota Cary was mistakenly addressed using the pronouns she/her. This originated from the Chinese AI translation platform “Fanyu” adopted for this translation work.

In our daily work, we use Chinese as our working language to draft reports. We are fully aware that Dakota Cary is male. In the Chinese version of the report, we referred to him using the Chinese character “其”, which is a gender‑neutral third‑person pronoun that can mean his, her, or their. However, during automatic translation via an AI translation platform, it was incorrectly rendered as she/her.

Given the current maturity of large language model translation technology, we did not conduct a secondary manual review of the English translation, which led to this error.

We sincerely thank Costin Raiu @craiu for identifying this mistake in Cracking the Fast16 Sabotage Malware Mystery released on the Three Buddy Problem channel.

While we hold different political stances from Dakota Cary @DakotaInDC, we formally apologize to him for this error.

Attached are three comparison images, including Original Chinese version, Erroneous English translation and Revised English version.

[wen6912 @wen6912]

#Antiy2026 #Apr 26

#fast16 #SentinelOne #A2PT #APT in Chinese and AI-translated version:

Chinese version:
展示网空能力肌肉的”精神战”——对SentinelOne曝光fast16的综合分析
https://t.co/MMvxeHcamD

🤖📄 #AITranslation English version:
A “Psychological Warfare” to Show Off Cyber Capabilities: A Comprehensive Analysis of SentinelOne’s Exposure of fast16
https://t.co/F8CXiK6Vie

#LLM extracted #TTPs

Antiy Malicious Code Encyclopedia: https://t.co/sOJQjTh5Yq
#Trojan/Win32.Fast16
https://t.co/5owcGYO4Hh

[wen6912 @wen6912]

#Antiy2026 #Apr 2

#Axios #SupplyChain #npm #OrDer #Trojan report published in Chinese and AI-translated version:

Chinese version:
Axios遭遇“指令闪击”——npm仓库OrDer木马投毒事件分析https://t.co/aHdpWzoZRo

🤖📄 #AITranslation English version:
Axios Targeted by”Command Blitz” — Analysis of the OrDer Trojan Poisoning Incident in the npm Repository
https://t.co/Cl9XQ6NVl0

#LLM extracted #TTPs

Antiy Malicious Code Encyclopedia: https://t.co/sOJQjTh5Yq
#Trojan/JS.OrDeR[Downloader]
https://t.co/drVDq19sqL

#Trojan/PowerShell.OrDeR[Backdoor]
https://t.co/fvOJARwwtr

#Trojan/Python.OrDeR[Backdoor]
https://t.co/q49UrRYsY6

#Trojan/MacOS.OrDeR[Backdoor]
https://t.co/Chzca8QXlI

#AI供应链攻击事件
https://t.co/Vp3k9vEhIX

[wen6912 @wen6912]

#Antiy2026 #Mar 25

#Ransomware #TOP10 #2025 summary report published in Chinese and AI-translated version:

Chinese version:
2025年活跃勒索攻击组织盘点
https://t.co/MwxJuopdaB

🤖📄 #AITranslation English version:

Inventory of Active Ransomware Attack Groups in 2025
https://t.co/Vna32q4rkt

#LLM extracted #TTPs

Antiy Malicious Code Encyclopedia: https://t.co/sOJQjTh5Yq

#Ransomware #Akira #Clop #DragonForce #INC #Lockbit #Lynx #Medusa #Play #Qilin #SafePay

https://t.co/YSayiDyvaF
https://t.co/1fc1wVu1hm
https://t.co/eLztU5iCZi
https://t.co/DXK9jhR4N3
https://t.co/PogEYgELV8
https://t.co/n245OqDPwB
https://t.co/YLot0zMkL5
https://t.co/YvsFB3BEG7
https://t.co/Xj7p4VqKtx
https://t.co/YFGiZwPVRS
https://t.co/6YSZETIz0y

[wen6912 @wen6912]

#Antiy2026 #Mar 19

#APT-TOCS #OceanLotus #海莲花 #APT published in Chinese and AI-translated English version:
Chinese version:
海莲花组织针对我国重点目标钓鱼攻击活动分析
https://t.co/CqZjDSP7FD

🤖📄 #AITranslation English version:

Analysis of OceanLotus Organization’s Targeted Phishing Attacks Against Key Targets in China
https://t.co/xUyrhWEE31

#LLM extracted #TTPs

Antiy Malicious Code Encyclopedia: https://t.co/sOJQjTh5Yq

#APT-TOCS #海莲花
https://t.co/ZfsnzmV0Q9

[wen6912 @wen6912]

#Antiy2026 #Mar 6

# Stuxnet #15years #9years #technicalreport

published in Chinese and AI-translated English version:
Chinese version:
从被忽视的细节中提炼防御的准则——“震网”攻击曝光15年再思考之技术篇(20260306)
https://t.co/fnUA77MUyL

震网事件的九年再复盘与思考(20190930)
https://t.co/z6rqqR9fia

🤖📄 #AITranslation English version:
Extracting Defense Principles from Overlooked Details——“Reconsidering the ‘Stuxnet’ Attack 15 Years After Its Exposure —— Technical Report(20260306)
https://t.co/jjlKpEHwBd
#LLM extracted #TTPs

Antiy Malicious Code Encyclopedia: https://t.co/sOJQjTh5Yq
Stuxnet
https://t.co/cnxzZww4CW

[wen6912 @wen6912]

Just saw this interesting 2024 post. Better late than never!
To clarify:
A2PT IS our term, but it was inspired by Michael (Lockheed Martin CIRT senior member) , his 2011 piece Why Stuxnet Isn't APT? (March 24, 2011).
He made clear that Stuxnet was far more complex than ordinary APTs:
• It was CNA (combat operation), not just CNE (exploitation)
• Far more sophisticated than typical APTs
We also cited his analysis in our 2019 report Nine-Year Retrospection and Reflection on the Stuxnet Event “震网事件的九年再复盘与��考”(Sep 30, 2019).
We coined A2PT = Double Advanced to describe U.S.-originated cyberattacks: more complex, more 0-days, more attack infrastructure, etc.

Is this not a fact?

@DakotaInDC

[Dakota Cary @DakotaInDC]

To make the US bigger and badder than poor, innocent China, PRC state media and cybersecurity firms have rolled out the red carpet of BS. USG teams are now referred to as A2PTs, an acronym which is the same as APT. My next report will delve further into this chicanery.