Activity timeline
Unnamed appears in 3 tracked threats between and ; the busiest month was 2026-06 with 1 report.
ATT&CK techniques observed
- T1027 Obfuscated Files or Information — Stealth (formerly Defense Evasion)observed in 2 of 3 tracked threats
- T1036 Masquerading — Stealth (formerly Defense Evasion)observed in 2 of 3 tracked threats
- T1140 Deobfuscate/Decode Files or Information — Stealth (formerly Defense Evasion)observed in 2 of 3 tracked threats
- T1204.002 User Execution: Malicious File — Executionobserved in 2 of 3 tracked threats
- T1219 Remote Access Tools — Command and Controlobserved in 2 of 3 tracked threats
- T1566 Phishing — Initial Accessobserved in 2 of 3 tracked threats
- T1005 Data from Local System — Collectionobserved in 1 of 3 tracked threats
- T1020 Automated Exfiltration — Exfiltrationobserved in 1 of 3 tracked threats
- T1021 Remote Services — Lateral Movementobserved in 1 of 3 tracked threats
- T1036.005 Match Legitimate Resource Name or Location — Stealth (formerly Defense Evasion)observed in 1 of 3 tracked threats
- T1041 Exfiltration Over C2 Channel — Exfiltrationobserved in 1 of 3 tracked threats
- T1056 Input Capture — Collectionobserved in 1 of 3 tracked threats
- T1059 Command and Scripting Interpreter — Executionobserved in 1 of 3 tracked threats
- T1059.001 PowerShell — Executionobserved in 1 of 3 tracked threats
- T1059.003 Windows Command Shell — Executionobserved in 1 of 3 tracked threats
Tracked threats
- China-Nexus and India-Nexus Espionage Groups Converge on Pakistani Law Enforcement Digitalization Platforms ("One Target, Two Flags")HIGH
- Coldcard Security Audit Phishing Campaign Installs ConnectWise ScreenConnect RATCRITICAL
- Fake Bug Report Prompt Injection Attacks Hijacking AI Coding Agents (Agentjacking)CRITICAL