Tag: ateraagent

1 Attack Reports | 0 Vulnerabilities

Attack reports

APT MuddyWater Targets CFOs with Multi-Stage Phishing & NetBird Abuse

A sophisticated spear-phishing campaign, likely linked to APT MuddyWater, is targeting CFOs and finance executives across multiple continents. The attackers use Firebase-hosted phishing pages with custom CAPTCHA challenges, malicious VBS scripts, and multi-stage payload delivery to deploy NetBird, …
apt
remote-access
finance
spear-phishing
multi-stage
vbs
firebase
2025-08-21
ateraagent
cfo
netbird
Published: August 21, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports