Threat Intelligence / Actor / Unknown (financially motivated eCrime actor; single-operator cluster per EclecticIQ)

Unknown (financially motivated eCrime actor; single-operator cluster per EclecticIQ)

1 tracked threat(s) · Categories: CAMPAIGN

Tracked threats

SEO Poisoning Campaign Impersonates Gemini CLI and Claude Code to Deliver In-Memory PowerShell Infostealer (EclecticIQ) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence