China-Linked Threat Group Targets Japanese Orgs' Servers

Winnti once used a variety of malware, but is now focused on SQL vulnerabilities and obfuscation, updated encryption, and new evasion methods to gain access.