Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
TAMECATGoogle: APT42 Deploys Nicecurl and Tamecat Backdoors via Journalist Spear-Phishing
Google threat analysts report APT42 (Charming Kitten) is running spear-phishing campaigns that impersonate journalists and NGOs to deploy Nicecurl (VBScript) and Tamecat (PowerShell) backdoors for command execution and data exfiltration.

SentinelOne Refines APT42 Iran War Assessment with Three Months of New Evidence
SentinelOne's midyear assessment of the Iran War cyber threat landscape refines their April initial assessment with three months of evidence on APT42/MOIS, IRGC, and persona activity, including AI-assisted spear phishing and TAMECAT backdoor deployment.
