StoryTwo

[cat-alyst]

Build out the characters:

• The Mark
• Conman - Ocean Lotus
• Bystanders
• Treasure

Build out plot:

• Terrain
• Defenses
• Rules of the world

[cat-alyst]

Meeting Notes

Challenge: Lots of shared knowledge between key people - not publically released Activity Scope: APT32 (which we are referring to as Ocean Lotus) Key Highlights of Scenario:

• Follow the human rights theme
• USB
• Airdrop exfil
• Use this story line (human rights aspect verses killchain) https://www.amnesty.org/en/latest/research/2021/02/click-and-bait-vietnamese-human-rights-defenders-targeted-with-spyware-attacks/

Stretch Goals for fun:

• Steganography - https://s7d2.scene7.com/is/content/cylance/prod/cylance-web/en-us/resources/knowledge-center/resource-library/white-papers/OceanLotus-Steganography-Malware-Analysis-White-Paper.pdf

Next steps:

Work on shared word document to create story Add capabilities with reporting to excel for different tactics

Tentative name = Lotus’s Are Flowers Too INC meets Spy Kitty....obviously a working title