Browsing: Threat Actor

Top Highlights JADEPUFFER now uses ransomware to destroy AI models, making recovery costly ($75,000-$500,000) and…

Fast Facts The threat employs a sophisticated communication system using Outlook calendar events and DNS…

Quick Takeaways A Russian-speaking threat actor, UAT-11795, uses trojanized software and social engineering to target…

Fast Facts CylindricalCanine exploited DigiCert support access to steal and use code-signing certificates, enabling the…

Summary Points Threat actors used AI-generated PowerShell scripts for aggressive Active Directory reconnaissance, exfiltrating data…

Top Highlights Threat actors are exploiting Microsoft’s passkey enrollment process via sophisticated voice phishing (‘vishing’)…

Fast Facts Iranian-linked group Cavern (Cav3rn) employs a sophisticated, modular C2 framework built on .NET,…

Summary Points Cavern Manticore employs a modular, multi-compile format (.NET, Mixed-Mode C++, NativeAOT) to evade…

Fast Facts Vidar malware is primarily distributed via phishing emails disguised as resumes or job…

Summary Points The threat actor Armored Likho targets government and power sectors using sophisticated, obfuscated…