STAC4749 is a threat cluster known for orchestrating Teams voice phishing campaigns to deploy Chaos ransomware. It shares operational parallels with TWINLOOT, including PyArmor-obfuscated Python backdoors and reverse SOCKS5 proxies.
STAC4749 is a threat cluster known for orchestrating Teams voice phishing campaigns to deploy Chaos ransomware. It shares operational parallels with TWINLOOT, including PyArmor-obfuscated Python backdoors and reverse SOCKS5 proxies.