STAC4713

Reported Context (1)

Sophos reported that this activity cluster used QEMU as a covert reverse SSH backdoor and harvested domain credentials; deployment of Payouts King ransomware was described as a likely goal. Weekly Cybersecurity Recap Covers Vercel Breach, Malware Campaigns and QEMU Abuse

CVE (1)

Malware (15)

People (1)

Threat Actors (8)

MITRE ATT&CK (10)

Vendors (7)

Products (18)

Tools (4)

Industries (8)

Countries (15)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.