Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Cybersecurity researchers at Huntress have identified an intrusion where an unknown threat actor used a suspected AI-generated PowerShell script to enumerate Active…
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns
Cybersecurity researchers at SentinelOne SentinelLABS have disclosed details of sustained cyber espionage activity targeting Pakistani law enforcement organizations, including the Balochistan Police,…
Mysterious Elephant: India-Nexus Cyber Espionage Group
Mysterious Elephant (also tracked as APT-C-08, APT-K-47, TAG-179) is a threat actor with ties to India-nexus adversaries such as SideWinder, Confucius, and…
SideWinder — Attack group profile
SideWinder was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Confucius — Attack group profile
Confucius was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Bitter — Attack group profile
Bitter was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Clop Ransomware Group Exploited MOVEit Zero-Day in 2023
The Clop ransomware group exploited a zero-day vulnerability in Progress MOVEit in 2023, impacting over 2,700 organizations. They are known for large-scale…
Fake Microsoft Entra Passkey Enrollment Used in Voice Phishing Attacks Targeting M365 Users
A sophisticated threat actor tracked as O-UNC-066 by Okta is targeting organizations across multiple sectors with a voice-based phishing (vishing) scheme that…
O-UNC-066: Threat Actor Behind Fake Passkey Vishing Campaign
O-UNC-066 is a threat actor tracked by Okta that has been conducting voice-based phishing attacks targeting Microsoft 365 users. The actor uses…
CL-CRI-1147: Palo Alto Networks Tracking of Passkey Phishing Cluster
CL-CRI-1147 is the identifier used by Palo Alto Networks Unit 42 for a threat cluster involved in fake passkey enrollment attacks. This…