Loading malware…
1 distinct threat actor attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
"Also used is a lightweight JavaScript payload dubbed PINPOINT that can collect basic user information and geolocation data through phishing pages."
1 distinct technique documented for this family, organized by ATT&CK tactic.
"...resorted to malicious QR codes that, when scanned, will link a victim's account to an actor-controlled Signal instance... These QR codes are known to masquerade as group invites, security alerts, or legitimate device pairing instructions... embedded in phishing pages..."
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.