Double Dragon

it wasn't.

So if APT41 is a nation state intelligence apparatus, why are they using an updated version of a cybercrime tool?

It represents a highly effective hybrid approach.

Since the source code wasn't public, APT41 either had to painstakingly reverse-engineer the cybercrime tool, or they simply purchased it directly from the criminal underground.

Just bought it off the shelf.

Basically, yeah.

So yeah, someone from...

Or something, an APT group like DPRK, APT41...

And also the latest one that we published was the Scattered Spider.

So those APT groups that are being active in the cybersecurity realm, we try to emulate them and then try to understand what's their core TTPs and then create some questions out of it.

Yes.

Chinese actors, specifically APT 41 and APT 24, are weaponizing what analysts call frontier AI.

The intelligence specifically points to the use of commercial artificial intelligence models, right? Uh, tools like Gemini and Claude.

Yes, exactly.