Threat Actor
CoralRaider
- First Reported
- Apr 4, 2024
- Latest Reported
- Apr 23, 2024
Reported Context (2)
- Talos assesses with moderate confidence that CoralRaider operates the campaign. Suspected CoralRaider Campaign Delivers Three Infostealers via PowerShell
- Talos reports that CoralRaider has operated since at least 2023 and targets victims in Asia and Southeast Asia. Talos assesses with high confidence that the operators are based in Vietnam and describes the activity as financially motivated. CoralRaider Uses RotBot and XClient to Steal Credentials and Social Media Data
Malware (6)
People (3)
MITRE ATT&CK (21)
Vendors (2)
Products (24)
Tools (3)
Industries (2)
Countries (19)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.