Skip to content

Unnamed adversary

Named by 2 kept items in this workspace.

Search every workspace for Unnamed adversary. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Fantastic clear-text passwords and where to collect them (Part 1 - Linux)
    article2026-06-21It is written here as Unnamed adversary (Citrix NetScaler backdoor incident).

    Attacker who backdoored an external Citrix NetScaler (ADC/Gateway) authentication portal login form to intercept and exfiltrate clear-text credentials at the point of entry, enabling lateral movement from two different administrator accounts without triggering EDR alerts.

  • Reflecting on AI in 2025: Faster Attacks, Same Old Tradecraft
    writeup2026-01-12It is written here as Unnamed adversary (Veeam credential theft actor).

    Enumerated a non-profit's network, moved laterally via WinRM, and attempted to deploy an AI-generated PowerShell script (C:\temp\v.ps1) targeting Veeam credentials; script failed to execute (Case study 2).

All threat actors in this workspace.