TA-NATALSTATUS: Activity Linked to TeamPCP
TA-NATALSTATUS is a threat actor tracked by security researchers, with activity overlapping with TeamPCP. Oligo Security noted that TeamPCP-linked infrastructure has been…
Tag: threat actor
IronErn: Threat Actor with Ties to TeamPCP
IronErn is another threat actor identified by researchers as having overlapping infrastructure and techniques with TeamPCP. The exact relationship remains unclear, but…
MarlboroMan: Threat Actor Behind RedC2
MarlboroMan is a threat actor who advertised RedC2 on Hack Forums and operates the Red Offsec website, selling the C2 framework for…
MoYu Group: The Threat Actor Behind BADBOX and Car Head Unit Malware
MoYu Group is a threat actor group attributed with high confidence to the BADBOX ad fraud and residential proxy scheme. They were…
MIDNIGHT NEPTUNE: Threat Actor Behind Axios Compromise
Google Threat Intelligence Group attributes the axios npm compromise to MIDNIGHT NEPTUNE, formerly known as UNC1069. The actor is linked to North…
GoldFactory: Chinese-Speaking Threat Actor Behind Banking Trojans
GoldFactory is a Chinese-speaking threat actor linked to multiple Android and iOS banking malware families, including GoldDigger, GoldPickaxe, GoldDiggerPlus, and GoldKefu. The…
Agent IDE: Suspicious VS Code Extension by Threat Actor
Agent IDE is a Microsoft Visual Studio Code extension published in the official marketplace by a threat actor known as 'johnnysilverhe', who…
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate…
SuccessKey Threat Actor Behind ViteVenom and ChainVeil Campaigns
SuccessKey is the threat actor attributed to the ViteVenom and ChainVeil campaigns, which use blockchain-based C2 infrastructure to deliver remote access trojans…
TetrisPhantom: APAC Government Threat Actor
TetrisPhantom is a highly skilled and resourceful threat actor first documented by Kaspersky in October 2023. It targets government entities in the…