ctrlINT What the industry said about every indicator, with the quote

GrayCharlieThreat actor

GrayCharlie is a threat actor that compromises WordPress sites to inject malicious JavaScript, redirecting visitors to NetSupport RAT payloads via fake browser update pages or ClickFix mechanisms. Insikt Group has identified extensive infrastructure linked to GrayCharlie, primarily associated with MivoCloud and HZ Hosting Ltd., including command-and-control servers and staging infrastructure.From MISP Galaxy

Last reported 3 months ago, by Recorded Future1 report

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each

  1. “Examples of recent reports include identifying victims targeted by GrayCharlie using compromised WordPress sites.”

    Recorded FutureVendor
    Where Expertise Meets Algorithm: The Insikt Group® Intelligence Edge

Thanks — we review every report.

Report a wrong match
What is wrong with GrayCharlie here?
No account needed. We do not store your IP address.