Tag: av icon spoofing

1 Attack Reports | 0 Vulnerabilities

Attack reports

UNG0801: Tracking Threat Clusters obsessed with AV Icon Spoofing targeting Israel

An analysis of threat clusters, dubbed UNG0801 or Operation IconCat, targeting Israeli organizations. The actors use socially engineered phishing lures in Hebrew, exploiting antivirus icon spoofing from well-known vendors like SentinelOne and Check Point. Two distinct infection chains were identifi…
phishing
dropbox
rust
telegram
pyinstaller
israel
2025-12-22
av icon spoofing
pytric
rustric
Published: December 22, 2025
Downloadable IOCs: 7
Click here to see more Attack Reports