CrikeyCon 2022 - Lina Lau - Inside the Persistent Mind of a Chinese APT

The motivation behind Chinese Advanced Persistent Threat (APT) groups have always been deeply rooted in nationalistic pride. Former Chairman Deng XiaoPing once stated, “It doesn't matter if a cat is black or white as long as it catches mice”. These words ring true in the series of targeted attacks launched by the Chinese APT groups throughout the years to gather intellectual property and conduct cyber espionage. But what does it take to build a nation-state actor? Indoctrination in the early years? A hiring system inbuilt into the education system?
In this talk, I will explore the tactics, techniques and procedures utilised by Chinese APT groups to launch cyber-attacks, how hiring and recruitment works at a nation-state level and use examples from recent incident response engagements we've worked at Secureworks. Attendees will not only learn about how Chinese APT groups conduct attacks and the various tools and techniques they use - but they will gain an understanding from a psychological standpoint, the motivations behind these attacks and what drives the mind of a Chinese nation-state actor.