Skip to content

KongTuke

Named by 2 kept items in this workspace.

Search every workspace for KongTuke. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • PathSentinel Radar
    tool2026-05-16It is written here as KongTuke (initial access broker).

    initial access broker

  • Dissecting CrashFix: KongTuke's New Toy
    writeup2026-01-16

    Threat actor/campaign tracked by Huntress since the beginning of 2025; behind the CrashFix malvertising campaign, malicious NexShield browser extension, ModeloRAT, and GateKeeper .NET payload. Started using finger.exe LOLBin technique in December of 2025. Distinguishes domain-joined (corporate) vict

All threat actors in this workspace.