Wisteria TsunamiThreat actor
- CyberRoot
- dev-0605
- mintedsoil
Microsoft threat actor profile. Origin/Threat: India, Private sector offensive actor.From MISP Galaxy
Last reported 1 month ago, by Risky Business News1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1110.004Credential Stuffing
“Mastodon credential stuffing attack: Mastodon has been hit by a credential stuffing attack, looking for users who reuse their passwords across sites.”
- T1684Social Engineering
“Passkey-themed campaign: Microsoft has spotted a pretty complex phishing and social engineering campaign hitting corporate environments using "fix your passkey" type of lures.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Risky Bulletin: Anthropic agents went hacking again“In a letter to US Secretary of Commerce Howard Lutnick, the three argue the US should sanction BellTroX, CyberRoot, and Appin, now operating as Sunkissed Organic Farms.”
Indicators in its reports
named in the reports above- collusion[.]wikiin 1 report
- mas[.]toin 1 report
- shakirov2036.bsky[.]socialin 1 report
Copy these 3 indicators · defanged
Thanks — we review every report.