Loading threat actor…
DEV-0249 is a Microsoft-tracked threat actor associated with distributing first-stage phishing payloads that can lead to human-operated ransomware intrusions. Activity linked to this actor was observed using the Sliver command-and-control framework in 2021. The available reporting supports characterization of DEV-0249 primarily as an initial-access or delivery-focused intrusion facilitator rather than a fully profiled standalone ransomware brand. High-confidence details beyond its role in phishing-enabled intrusion chains and use of Sliver are currently not available.
1 malware family Mallory has associated with this actor across public reporting.
2 sources tracked across advisories and community write-ups. News coverage will land here when it surfaces.
No news coverage yet. Advisories and community discussion only.