Threat Actor
STAC3725
- First Reported
- Jul 9, 2026
- Latest Reported
- Jul 9, 2026
Reported Context (1)
- Sophos tracking name for the cluster observed by Huntress; the article assesses the activity as likely involving an initial access broker but says attribution to an IAB or DragonForce affiliate is uncertain. Huntress Details CitrixBleed 2 Intrusions Leading to DragonForce Ransomware
CVE (3)
Malware (1)
People (3)
MITRE ATT&CK (12)
Vendors (1)
Products (6)
Tools (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.