Threat Intelligence / Actor / Unknown (Financially-motivated AiTM PhaaS operator)

Unknown (Financially-motivated AiTM PhaaS operator)

1 tracked threat(s) · Categories: PHISHING

Also known as: Code of Conduct phishing crew, COC AiTM operator

Tracked threats

Multi-Stage 'Code of Conduct' Phishing Campaign Leads to AiTM Token Compromise (Microsoft Defender Research, April 2026) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence