TA-NATALSTATUS: Activity Linked to TeamPCP
TA-NATALSTATUS is a threat actor tracked by security researchers, with activity overlapping with TeamPCP. Oligo Security noted that TeamPCP-linked infrastructure has been…
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
IronErn: Threat Actor with Ties to TeamPCP
IronErn is another threat actor identified by researchers as having overlapping infrastructure and techniques with TeamPCP. The exact relationship remains unclear, but…
Dark Caracal: Latin American Threat Actor
Dark Caracal is a threat actor with a documented history of operating in Latin America. Arctic Wolf linked the GoCaracal malware campaign…
UAT-10147: Chinese Cybercrime Group Targeting Web Servers
A Chinese cybercrime group identified by Cisco Talos that targets Windows and Linux web servers globally across education, media, technology, and gaming…
QTFY: China-Linked Cyber Espionage Group
QTFY is a Chinese state-sponsored hacking group linked to Nanjing Xinjiuwei Network Technology Company. Active since 2018, it has targeted U.S. critical…
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
Cybersecurity researchers have uncovered new infrastructure and previously undocumented malware linked to Nimbus Manticore, an Iranian state-sponsored hacking group affiliated with the…
Tortoiseshell: Iranian Threat Actor Targeting Middle East and Europe
Tortoiseshell, also known as Imperial Kitten and Unyielding Wasp, is an Iranian threat actor active since at least July 2018. It targets…
Charming Kitten: Iranian Cyber Espionage Cluster
Charming Kitten, also known as Eclipsed Wasp, is a cluster of Iranian cyber espionage groups. It includes subgroups like Tortoiseshell and Nimbus…
DOUBLOON DREDGER: Abusing Notion for Phishing
DOUBLOON DREDGER is a financially motivated threat actor that abuses Notion accounts to invite targets to view PDFs containing malicious links. The…
Russia-Linked Influence Operation Leverages AI to Promote Fake Think Tank
A Russia-linked influence operation used ChatGPT to promote the International Burke Institute, a fake think tank with a sovereignty index favoring Russia.…