Name		Name	Last commit message	Last commit date
parent directory ..
sample		sample
APT32-Graph-Deobfuscator.py		APT32-Graph-Deobfuscator.py
ESET_OceanLotus.pdf		ESET_OceanLotus.pdf
OL_OSX_decryptor.py		OL_OSX_decryptor.py
OceanLotus' Attacks to Indochinese Peninsula Evolution of Targets, Techniques and Procedure.pdf		OceanLotus' Attacks to Indochinese Peninsula Evolution of Targets, Techniques and Procedure.pdf
OceanLotus-Steganography-Malware-Analysis-White-Paper.pdf		OceanLotus-Steganography-Malware-Analysis-White-Paper.pdf
Oceanlotus-APK-sample.TXT		Oceanlotus-APK-sample.TXT
README.MD		README.MD
Stairwell-threat-report-The-origin-of-APT32-macros.pdf		Stairwell-threat-report-The-origin-of-APT32-macros.pdf
apt32_report_2019.pdf		apt32_report_2019.pdf
aptnote0402		aptnote0402
aptnote20190409		aptnote20190409
hunting-rule.txt		hunting-rule.txt
oceanlotus_png_loader.yar		oceanlotus_png_loader.yar
png_decode.py		png_decode.py

README.MD

Oceanlotus

APT32-Graph-Deobfuscator.py come from checkpoint

https://research.checkpoint.com/deobfuscating-apt32-flow-graphs-with-cutter-and-radare2/

Analysis report on the attack on mobile devices by Oceanlotus https://mp.weixin.qq.com/s/L-tCvLPOOMhP0ndgdqhkNQ

Oceanlotus Linux Backdoor

https://blog.netlab.360.com/rotajakiro_linux_version_of_oceanlotus/

https://blog.netlab.360.com/stealth_rotajakiro_backdoor_en/