Threat Actor
DarkSpectre
- First Reported
- Jun 29, 2026
- Latest Reported
- Jun 29, 2026
Reported Context (1)
- Koi Security ties mitarchive.info, the domain used for StegoAd credential-payload exfiltration, to DarkSpectre. The article presents this as a connection, while Microsoft has not named the StegoAd actor. Microsoft Removes 119 Edge Extensions Linked to StegoAd Campaign
Threat Actors (2)
MITRE ATT&CK (10)
Vendors (2)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.