The APT1 group had been largely silent since the Mandiant report came out. The group is now actively conducting attacks again using retooled versions of Aumlib and Ixeshe. Attackers appear to have rewritten the malware, possibly in response to the New York Times report, FireEye says. Some researchers say the retooling malware was predictable, but others are less inclined to connect it to the group that devised the attacks described in APT 1 report. Some experts said the APT report may eventually make it more difficult to defend against sophisticated groups of attackers.”]