Thomas Rid on Twitter

“Previously unreported details on some of the evidence & methods used by Mandiant to attribute China’s PLA Unit 61398 in the landmark 2013 APT1 report. Source: David Sanger’s new book”