UAC-0063: Prior Threat Actor Targeting Central Asia
UAC-0063 is a threat actor previously identified as targeting Central Asia, often using cyber espionage tactics. It is one of the groups…
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
FamousSparrow: Espionage Group Active in Central Asia
FamousSparrow is a threat actor known for targeting government entities in Central Asia, often exploiting vulnerabilities in web applications and using custom…
SneakyChef: Chinese-Speaking Threat Actor Behind SpiceRAT
SneakyChef is a Chinese-speaking threat actor attributed to the use of SpiceRAT, a remote access tool used in espionage operations. The group…
REF5961: Group Using BLOODALCHEMY Backdoor
REF5961 is a threat group first documented by Elastic Security Labs in October 2023. It was observed using the BLOODALCHEMY backdoor in…
StopAndProtect: Large-Scale WordPress Compromise Operation
A large-scale operation turning thousands of compromised WordPress websites into infrastructure for malware delivery, C2 communications, and stolen data storage.
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
ReliaQuest has uncovered a sophisticated JavaServer Pages (JSP) web shell deployed by the Clop ransomware group following the exploitation of CVE-2026-12569, a…
Settra — Attack group profile
Settra was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Anubis — Attack group profile
Anubis was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Falcon — Attack group profile
Falcon was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Pink — Attack group profile
Pink was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…