Tag: singlecamper

2 Attack Reports | 0 Vulnerabilities

Attack reports

10 Things I Hate About Attribution: RomCom vs. TransferLoader

This report analyzes the activities of two threat actor clusters: TA829 and UNK_GreenSec. TA829 conducts both espionage and cybercrime operations using tools like SingleCamper and DustyHammock. UNK_GreenSec deploys TransferLoader malware leading to ransomware infections. The actors share similariti…

Published: July 1, 2025

Downloadable IOCs: 103

Ukrainian and Polish entities targeted with RomCom malware variants

A Russian-speaking threat group, UAT-5647, has been conducting attacks against Ukrainian government entities and Polish targets since late 2023. The group has evolved its toolset to include four distinct malware families: RustClaw and MeltingClaw downloaders, DustyHammock backdoor, and ShadyHammock…

Published: October 17, 2024

Downloadable IOCs: 0

Click here to see more Attack Reports