Motivation: Financial
Reported to target the logistics sector via phishing that escalates to credential theft, lateral movement, and attempted ransomware deployment. Public reporting is limited and partly overlaps with a training-scenario name of the same label, so treat attribution cautiously.
Public reporting is limited and partly overlaps with a training-scenario name of the same label, so attribution should be treated cautiously.
Attribution draws on public threat-intelligence reporting · Actor-claimed + sample. Primary source →
Check your exposure privately, or request a tailored exposure audit.