Threat Intelligence / Actor / nhattuanbl
nhattuanbl
Also known as: nhattuanbl
Tracked threats
- Malicious Packagist Packages Deliver Cross-Platform PHP RAT via Fake Laravel Utilities (nhattuanbl Campaign) — HIGH
- Fake Laravel Packages on Packagist Deploy Cross-Platform RAT via Supply Chain Compromise — HIGH
Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →