Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Proofpoint Warns TA4922 Deploys Atlas RAT and Multiple Malware Loaders
Threat Actors
Excerpt
The Chinese-speaking cybercriminal ecosystem is rapidly expanding, with a newly designated threat actor, TA4922, leading the charge. Recently tracked by Proofpoint, this financially motivated group targets organizations across East Asia and Europe using highly tailored social engineering. Driven by a fast-paced operational tempo, TA4922 is shifting its tactics, moving away from simple credential phishing to deploying a diverse arsenal of advanced malware, including the newly…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | a648db354820ea4d02940cb1702b35974513b7aae83f6dffaacaac4ba31f9295 | High | Score 86/100 | First seen |
| SHA256 | 584a9448dda46bd590d7a2f86228100d2ae6e0d6d990c1a4459ed5ee28e07ae8 | High | Score 86/100 | First seen |
IOC Relationship Graph
Building graph…