Threat Intelligence / Actor / CityOfSin / @d_coroner
CityOfSin / @d_coroner
Also known as: CityOfSin, @d_coroner, Backdoor.Win64.Alien operator
Tracked threats
Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →