PROSPERO: Russian Bulletproof Hosting Provider
PROSPERO is a Russian bulletproof hosting provider used by Icarus to host stolen data files. Its IP addresses have been previously linked…
Tag: Icarus
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce disabled the Klue Battlecards app integration after detecting unusual activity that led to unauthorized access to customer data via OAuth token…
Icarus: Extortion Group Behind Klue OAuth Token Abuse
Icarus is an extortion group active since April 28, 2026, responsible for compromising Klue's integration infrastructure and exfiltrating customer data via OAuth…