Tool
PDQ Deployer
- First Reported
- Apr 7, 2026
- Latest Reported
- Apr 7, 2026
Reported Context (2)
- in SmarterMail and CVEâ2025â10035 in GoAnywhere MFT), abused LOLBins, RMM tools, Impacket, PDQ Deployer, and Rclone for credential theft, lateral movement, exfiltration, and Defender tampering to enable Microsoft Details Storm-1175’s Exploitation and Medusa Ransomware Operations
- tunnels, Remote Desktop Protocol (RDP), various remote monitoring and management (RMM) tools, PDQ Deployer for payload execution, Impacket and Mimikatz for lateral movement and credential harvesting, and Microsoft Reports Medusa Ransomware Group Rapidly Exploits Vulnerabilities
CVE (2)
Malware (1)
People (2)
Threat Actors (2)
MITRE ATT&CK (20)
Vendors (8)
Products (24)
Tools (7)
Industries (5)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.