I think this is an age-old question and I’ve seen a lot of discussion around western security companies suppressing coverage of these APTs for a multitude of reasons, but someone somewhere has to be talking about this in the public. So where?
We know that western nation states (I am primarily talking about the United States here, but not just the US) have cyber operations and I refuse to believe that “we’re just so good/focused/intentioned that we don’t get caught”.
I know there are a lot of Chinese equivalents to western threat intelligence platforms (I just learned about tix.qq.com today as a Chinese Virus Total) but is that the best way to get this coverage?
Is Symantic publishing NSA malware they find in the wild? Does CrowdStrike have a secret “Eagle” action figure to represent CIA TAs that they inevitably find and attribute from their dataset but don’t publish?
Read news from Eastern Europe, Latin America, and Asia if you want to hear about western APT’s.
The propaganda cycle works both ways. We hear about foreign APT’s to instill in us that they are the enemy, they hear it about us for the same reasons.
That’s good general advice, but do you have any specific links? I spend a bit of time reading Chinese-language threat intel sites and there’s very little public information of that nature. Perhaps Eastern European or Latin American sources differ, and I’d love to know about them.
I can barely speak english, let alone another language so unfortunately no. I don’t have any specific links. I had a former colleague who was from Columbia who would tell me about the Latin America news. I can reach out to him and ask for some links.
As far as personal experience with news about Western APT’s, the only one that comes to mind is the Shadow Brokers leaks.