Loading malware…
1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
Initial Access: Phishing operations using cloned official government and institutional websites, victims directed to convincing replicas that trigger automatic download of malicious payloads. December 2024 campaign delivered Sliver RAT via this mechanism.
5 distinct techniques documented for this family, organized by ATT&CK tactic.
use of legitimate cloud services for C2 obfuscation.
Initial Access: Supply chain compromise through overseas telecommunications provider, exploiting a trusted third-party network connection to bypass perimeter defenses.
Initial Access Vectors: Sophisticated spear-phishing with tailored social engineering, exploitation of email vulnerabilities, targeting of researchers and government officials with fake job offers, and collaboration invitations.
victims directed to convincing replicas that trigger automatic download of malicious payloads.
December 2024 campaign delivered Sliver RAT via this mechanism.
No public activity tracked yet. Mallory keeps watching.
No public activity observed for this malware family.