Chris Duggan

Reported Context (2)

Shared additional insights about the activity, including a search query and a list of likely associated IP addresses. Researchers Identify SparkRAT Infrastructure and macOS Activity in Suspected DPRK Campaign
Previously reported the certificate pattern with the Common Name “Kubernetes Ingress Controller Fake Certificate,” according to the article. Golang Cobalt Strike Beacon Uses VS Code Tunnels for Command and Control

CVE (1)

Malware (2)

People (2)

MITRE ATT&CK (6)

Vendors (4)

Products (7)

Tools (1)

Industries (1)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.