TAG-195: Financially Motivated MaaS Developer
TAG-195 is the moniker used by Recorded Future's Insikt Group to track the Golden Chickens MaaS developer. It is financially motivated and…
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
TAG-127: Operator and Customer of TAG-195 Tooling
TAG-127 is an operator and customer of TAG-195's MaaS tooling. It has been observed deploying TinyEgg via ClickFix-style social engineering campaigns and…
Venom Spider: Alternate Name for Golden Chickens
Venom Spider is another name for the Golden Chickens threat actor group, which operates a malware-as-a-service ecosystem.
Cobalt Group: Cybercrime Group Using Golden Chickens Tools
Cobalt Group, also known as Cobalt Gang, is a cybercrime group that has used tools from the Golden Chickens MaaS ecosystem.
Evilnum: Cybercrime Group Using Golden Chickens Tools
Evilnum is a cybercrime group that has utilized tools from the Golden Chickens MaaS ecosystem.
FIN6: Cybercrime Group Using Golden Chickens Tools
FIN6 is a cybercrime group that has employed tools from the Golden Chickens MaaS ecosystem.
TA458: Russian Military Intelligence Operation Targeting Webmail
TA458 is a threat actor tracked by Proofpoint, likely a Russian military intelligence operation. It conducts Operation RoundPress using half-click XSS exploits…
UAC-0099: Russia-Aligned Threat Cluster Targeting Ukraine
UAC-0099 is a Russia-aligned threat cluster tracked by CERT-UA, active since at least mid-2022. It has used phishing emails and exploits in…
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…
CL-STA-1114 — Attack group profile
CL-STA-1114 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…