UNK_LateNight

Named by 2 kept items in this workspace.

Search every workspace for UNK_LateNight. It matches the name as written, so it can find other things that share it.

The items that name it 2

[tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026
article2026-09-24It is written here as UNK_LateNight: used BlueMoon against US aerospace with ShadowPad.
used BlueMoon against US aerospace with ShadowPad
Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Chrome/Windows Zero-Day Chain
writeup2026-09-09
China-aligned espionage-focused threat actor cluster (UNK_ designator, not yet numerically designated), began using BlueMoon on 2 September 2026 targeting multiple US aerospace companies with B2B/RFQ-themed phishing tied to the US defense industrial base. Delivered ShadowPad backdoor via DLL-sideloa

All threat actors in this workspace.