Threat Intelligence / Actor / Multiple (Cobalt Group, APT29, Kimsuky, Gamaredon, TA505, general cybercrime)

Multiple (Cobalt Group, APT29, Kimsuky, Gamaredon, TA505, general cybercrime)

Nation: Multiple (Russia, North Korea) · 1 tracked threat(s) · Categories: PHISHING

Also known as: Carbanak, FIN7, Cozy Bear, Midnight Blizzard, Nobelium, The Dukes, Armageddon, UAC-0010, Shuckworm, Thallium, Velvet Chollima

Tracked threats

Screensaver (.SCR) Files Used as Initial Access Vector — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence