And, TrueCrypt provides an effective open-source full disk encryption solution for Windows, Apple, Linux, and Android systems. WinRAR enables a person to encrypt a file with AES-256 in CBC mode with a strong PBKDF2 HMAC-SHA256 based key. Both WinRAR and TrueCrypt help provide strong and reliable encryption. For example, WinRAR packs and encrypts files with strong suites like AES-256, and TrueCrypt encrypts full hard drives all in one swoop. The tools targeted by this group enable practices for securing secrecy and integrity of data.

Encryption ToolsĬlearly this APT is interested in encrypted data and communications. Adding in their creative waterholing and poisoned installer tactics, we describe the StrongPity APT as not only determined and well-resourced, but fairly reckless and innovative as well. In particular, the focus was on Italian and Belgian users, but the StrongPity watering holes affected systems in far more locations than just those two.

What is most interesting about this group’s more recent activity however, is their focus on users of encryption tools, peaking this summer. The group has quietly deployed zero-day in the past, effectively spearphished targets, and maintains a modular toolset. The StrongPity APT is a technically capable group operating under the radar for several years.

Truecrypt 7.2 vs 7.1a