Exercise Directions:

In this exercise, you will need to use the Internet to perform research on an APT group. Select one of the following Advanced Persistent Threat groups:

Cozy Bear

Fancy Bear

APT$19$

APT$39$

Wizard Spider

Equation Group

Lazarus Group

Charming Kitten

Answer the following questions related to the APT group you have selected:

What is the general history of the group?

Where is this group assumed to be based?

How has attribution been accomplished to identify this group?

Does this group go by any other names?

How long has the group been operating?

What countries does this group target?

What tools, tactics, and procedures do the group use when attacking targets?

Is this group associated with any known malware? If so$,$ what malware and how does that malware operate?

Is this group associated with any known widespread attacks? If so$,$ what was the impact of those attacks?

For clarity, you do not have to answer the questions in line and can structure your answers as paragraphs if desired. Here is a list of resources you may choose to use to conduct your research $($but you are not limited to this list$)$: