As cited
Copy frozen at (site build).
threat intel
Exploring the REF2731 Intrusion Set
Elastic Security Labs identified REF2731, a five-stage intrusion set that deploys the PARALLAX loader and NETWIRE remote access trojan (RAT). The campaign chains these tools together across its attack stages.
Why it matters: Defenders tracking PARALLAX and NETWIRE activity should correlate findings with REF2731 tactics to identify and disrupt the full infection chain.
- Source published
- First seen by Cybersecurity Tracker