Threat Intelligence / Actor / CL-STA-1020

CL-STA-1020

As of 2026-07-27, CL-STA-1020 is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware.

1 tracked threat(s) · Categories: MALWARE

Tracked threats

HazyBeacon (CL-STA-1020) — AWS Lambda Function URL Abuse for Covert C2 Against Southeast Asian Governments — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence