Person
Thijs Xhaflaire
- First Reported
- Jan 28, 2026
- Latest Reported
- Sep 30, 2026
Reported Context (4)
- Named as the article's author. CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal Passwords and Launch an Implant
- Security researcher who analyzed the PamStealer variant and described its delivery and execution changes. PamStealer macOS Variant Uses Live C2 Key Exchange and Multiple Persistence Methods
- Author of the article analyzing this PamStealer variant. PamStealer macOS Variant Adds Server-Dependent Decryption and Swift Infostealer
- Identified as a Jamf Threat Labs community member who submitted the repository that led the OpenSourceMalware team to the campaign. Researchers Trace Fake-Interview Campaign Using Malicious VS Code Tasks to Deliver InvisibleFerret
Malware (4)
People (1)
Threat Actors (1)
MITRE ATT&CK (31)
Vendors (2)
Products (9)
Tools (1)
Industries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.