2 distinct threat actors attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
School of Magic, Clown Food, and Cursed Fire: These NSA tools were specifically designed for extracting sensitive files from telecom and defense research systems.
School of Magic, Clown Food, and Cursed Fire: These NSA tools were specifically designed for extracting sensitive files from telecom and defense research systems.
1 distinct technique documented for this family, organized by ATT&CK tactic.
OPERATION BEHIND ENEMY LINES: A suite of tools used to query, package, and encrypt stolen data before transmitting it to NSA-controlled servers ... Use of Proxy Servers & VPNs: To avoid detection, stolen data was routed through 54 jump servers and proxy nodes in 17 countries, masking the true origin of the attackers.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.