Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
China-based threat actors are deploying RatHat, a sophisticated Android Trojan that leverages generative AI for UI automation and ADB self-pairing for persistent shell access.
The North Korean WaterPlum group uses fake job interviews and malicious development tools to compromise IT professionals, stealing over $10.7 million in cryptocurrency.
The SilkParasite campaign, active since 2022, utilizes shared SpiceRAT, NodeEdgeRAT, and NomadRAT infrastructure to target government and energy sectors across Central Asia.
