Tag: havoc demon

2 Attack Reports | 0 Vulnerabilities

Attack reports

Fake Tech Support Delivers Havoc Command & Control

A sophisticated cyber attack campaign combines social engineering and advanced malware techniques. Attackers pose as IT support to gain initial access, then deploy a modified version of the Havoc C2 framework. The malware uses DLL sideloading, indirect syscalls, and custom loaders to evade detectio…

social engineering

dll sideloading

lateral movement

evasion techniques

remote monitoring tools

Published: March 5, 2026

Downloadable IOCs: 11

Hamas-affiliated Threat Actor WIRTE Continues its Middle East Operations and Moves to Disruptive Activity

Check Point Research has been tracking ongoing activity of the WIRTE threat actor, associated with Hamas, despite the ongoing conflict in the region. The group continues to target entities in the Palestinian Authority, Jordan, Iraq, Egypt, and Saudi Arabia for espionage. WIRTE has expanded its oper…

cyber-espionage

Published: November 12, 2024

Downloadable IOCs: 90

Click here to see more Attack Reports