DEEPPOST

DEEPPOST is a post-exploitation data exfiltration tool developed by the Chinese state-affiliated threat actor known as BrazenBamboo. It is designed to facilitate the unauthorized transfer of files from compromised systems to remote endpoints, often used in conjunction with other malware such as DEEPDATA and LIGHTSPY to enhance cyber espionage operations. DEEPPOST enables attackers to efficiently extract sensitive information, including system logs, captured credentials, and user activity records