Precursor Intelligence

Threat News

Latest cyber threat intelligence, breaches and exploitation

2 matching stories

APT42
  • Threat Actor Activity29d ago·3 sources

    Google: APT42 Deploys Nicecurl and Tamecat Backdoors via Journalist Spear-Phishing

    Google threat analysts report APT42 (Charming Kitten) is running spear-phishing campaigns that impersonate journalists and NGOs to deploy Nicecurl (VBScript) and Tamecat (PowerShell) backdoors for command execution and data exfiltration.

    APT42Charming KittenNicecurl+3
    Google: APT42 Deploys Nicecurl and Tamecat Backdoors via Journalist Spear-Phishing
  • Threat Actor Activity29 Aug 2026·4 sources

    SentinelOne Refines APT42 Iran War Assessment with Three Months of New Evidence

    SentinelOne's midyear assessment of the Iran War cyber threat landscape refines their April initial assessment with three months of evidence on APT42/MOIS, IRGC, and persona activity, including AI-assisted spear phishing and TAMECAT backdoor deployment.

    APT42IranMOIS+3
    SentinelOne Refines APT42 Iran War Assessment with Three Months of New Evidence