Kneeguard

Reported Context (1)

Name used by Telegram user ID 7595680682; under this name, the account advertised a package of Chinese databases and discussed data transactions. The report does not confirm a connection to RockHavks. StealthMole Traces RockHavks’ Earlier Seller Accounts Across Underground Forums

Threat Actors (8)

Vendors (1)

Products (2)

Tools (3)

Industries (2)

Countries (17)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.