PerSwaysion — APT Profile

PerSwaysion conducts phishing campaigns targeting high-level executives. They have been active since at least August 2019 and are believed to be based in Vietnam. PerSwaysion has recently updated their techniques, using more direct phishing methods and leveraging Microsoft 365 to steal credentials.

Tools & malware

Vendor research

Read the full analysis on IntelFusions