Skip to content
Threat Feed
Subscribe

Tag

Post-Compromise

3 briefs RSS
high threat

NeedyMantis Modular Post-Compromise Framework

NeedyMantis is a modular, multi-stage malware framework used by threat actors like Storm-3069 to establish persistence and perform follow-on operations via DLL sideloading and custom encrypted archives.

Storm-3069 persistence defense-evasion post-compromise modular-malware
2t 2i
high threat

Tracking Storm-2570 Ransomware Affiliate Tradecraft

Storm-2570 is a persistent ransomware affiliate that uses standardized post-compromise tooling across multiple RaaS ecosystems to conduct lateral movement and exfiltration.

Storm-2570 ransomware rmm-abuse tunneling post-compromise
2r 4t
high threat

UAT-10147 Deploys SPECTRE Cross-Platform Backdoor

The threat actor UAT-10147 is deploying a sophisticated cross-platform backdoor named SPECTRE, featuring kernel-level rootkits, BYOVD defense evasion, and AI-assisted development artifacts to target IIS and Linux infrastructure.

Internet Information Services UAT-10147 backdoor cross-platform rootkit byovd e-commerce-fraud cybercrime agentic-ai web-exploitation +1
2r 6t 2i updated