Bookworm to Stately Taurus Using the Unit 42 Attribution Framework

Using a systematic, evidence-based attribution framework, Unit 42 definitively links the modular Bookworm malware to the Chinese APT group Stately Taurus through shared technical artifacts, infrastructure, and operational patterns, achieving high-confidence attribution and advancing collective threat intelligence.