Loading malware…
1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
Hydra Saiga operators used... the open-source tool FakeLogonScreen which displays a fake Windows logon screen to capture a victim’s password.
2 distinct techniques documented for this family, organized by ATT&CK tactic.
The attackers... deployed an open-source fake login screen keylogger... Malicious tools used included... Revealer Keylogger
"FakeLogonScreen... displays a fake Windows logon screen to capture a victim’s password"
The attackers... deployed an open-source fake login screen keylogger... Malicious tools used included... Revealer Keylogger
"FakeLogonScreen... displays a fake Windows logon screen to capture a victim’s password"
2 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.