Tag
high
advisory
Large-Scale AI-Assisted Business Email Compromise Campaign
2 TTPsThreat actors are executing a massive business email compromise campaign utilizing AI-generated templates and layered social engineering to deceive finance departments into initiating fraudulent ACH payments.
bec
social-engineering
financial-fraud
ai-assisted
phishing
2t
high
threat
Russian-Speaking Hacker 'bandcampro' Leverages Google Gemini CLI for Botnet Operations
1 rule 5 TTPsA Russian-speaking threat actor known as 'bandcampro' is using Google's open-source Gemini CLI to manage and control a botnet of eight compromised dental clinic computers, facilitating activities such as password cracking, C2 infrastructure migration, and planning cryptocurrency fraud.
OpenDental
bandcampro
ai-assisted
botnet
cybercrime
command-and-control
powershell
credential-access
1r
5t