Skip to content

Unattributed threat actor

Named by 2 kept items in this workspace.

Search every workspace for Unattributed threat actor. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT
    writeup2026-09-01It is written here as Unattributed threat actor (tracked via tampered Exodus Wallet installer campaign).

    Operator(s) behind a modular RAT delivered via a trojanized Exodus Wallet installer; compromised four Huntress-protected organizations between late July and mid August 2026, three within 85 minutes of each other on August 18, 2026 using an installer built the day before. Registered an npm scope (@in

  • Velociraptor WSUS Exploitation, Pt. I: WSUS-Up?
    writeup2025-11-20It is written here as Unattributed threat actor (WSUS exploitation incident).

    Actors who exploited CVE-2025-59287 in WSUS on November 12, 2025 to gain initial access, then installed Velociraptor for C2, ran discovery commands, and were contained by Huntress SOC analysts

All threat actors in this workspace.