As cited
Copy frozen at (site build).
threat intel
From South America to Southeast Asia: The Fragile Web of REF7707
REF7707 conducted a targeted attack against a South American foreign ministry using previously unknown malware families. Operational security failures and inconsistent evasion techniques revealed additional attacker infrastructure extending into Southeast Asia.
Why it matters: Government agencies and diplomacy-focused organizations need to assess exposure to novel malware families deployed by this threat actor, and defenders should hunt for the revealed infrastructure indicators.
- Source published
- First seen by Cybersecurity Tracker