TAG-127: Operator and Customer of TAG-195 Tooling

July 24, 2026

TAG-127 is an operator and customer of TAG-195's MaaS tooling. It has been observed deploying TinyEgg via ClickFix-style social engineering campaigns and uses delivery methods like ClickFix or VenomLNK.

Discovered from: Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

ClickFixsocial engineeringTAG-127TinyEggVenomLNK

Follow this topic

Use the heart button to add this CVE, attack group, malware, company, product or training to your personal page.

Search CybersecurityBoard

Search for:

CyberSecurityBoard
Cybersecurity intelligence, vulnerability context, vendor profiles and training discovery.