[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiEVzgJfrNeMEptWD5pXfsxBU1p5SVRsFBSsLATMbQg4":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":11,"target_industries":12,"target_countries":13,"incident_types":14,"references":15,"techniques":18,"technique_count":19,"created_at":20,"seoMetadata":21,"schemaOrg":25},"REF2924","ref2924",[],"A group monitored as REF2924 by Elastic Security Labs is wielding novel data-stealing malware — an HTTP listener written in C# dubbed Naplistener by the researchers — in attacks against victims operating in southern and southeast Asia.According to a blog post by Elastic senior security research engineer Remco Sprooten, in that region of the world, network-based detection and prevention technologies are the de facto method for securing many environments.","CN",null,[],[],[],[16,17],"https:\u002F\u002Fwww.elastic.co\u002Fsecurity-labs\u002Fref2924-howto-maintain-persistence-as-an-advanced-threat","https:\u002F\u002Fwww.elastic.co\u002Fsecurity-labs\u002Fintroducing-the-ref5961-intrusion-set",[],0,"2023-11-07T02:15:03.167786+00:00",{"title":22,"metaDescription":23,"keywords":24},"REF2924 Threat Actor Profile | EdgeProtect","A group monitored as REF2924 by Elastic Security Labs is wielding novel data-stealing malware — an HTTP listener written in C# dubbed Naplistener by t...","REF2924, threat actor, APT, cyber threat, threat intelligence, CN",{"@context":26,"@type":27,"name":6,"alternateName":28,"description":9,"url":29,"mainEntityOfPage":30,"location":32},"https:\u002F\u002Fschema.org","Organization",[],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fref2924",{"@type":31,"@id":29},"WebPage",{"@type":33,"name":10},"Country"]