Intelligence Insights: January 2025
ID: 6c45d89e-88a7-5d06-b91f-7d18ed8afba4
STIX ID: report--6c45d89e-88a7-5d06-b91f-7d18ed8afba4
Feed Name: Red Canary
Threat Score
Red Canary's December 2024 intelligence highlights continued prevalence of the 'paste and run' initial access technique delivering multiple payloads (Vidar, LummaC2, NetSupport Manager) and notes ChromeLoader remaining the most-observed threat while Amber Albatross rose in prevalence; DarkGate reappeared as a follow-on payload leveraging RMM tools after social engineering, and a new VBS worm named Tangerine Turkey delivering a cryptominer debuted.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.