Operation SLOW#TEMPEST

Description

(Securonix) The Securonix Threat Research team has uncovered a covert campaign targeting Chinese-speaking users with Cobalt Strike payloads likely delivered through phishing emails. The attackers managed to move laterally, establish persistence and remain undetected within the systems for more than two weeks.

Names

NameName-Giver
Operation SLOW#TEMPEST?

Country

Motivation

  • Information theft and espionage

First Seen

2024

Observed Countries

Tools

Information

Other Information

Uuid

74200598-520d-4bf8-af62-e1fc08587450

Last Card Change

2024-10-23