lab

Arctic Wolf Labs

Threat research group inside Arctic Wolf, a US security operations company; it publishes malware analysis, intrusion reporting and indicators drawn from its monitoring customers.

Known aliases

Arctic Wolf

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

Lunex sells a stealer that blinds security tools with a vulnerable AMD driver

Ontinue says the Lunex stealer-for-rent loads a flawed AMD driver, CVE-2023-20598, to switch off security tools before robbing seven browsers. That driver step is rarely used ahead of an info stealer, and Lunex is rented to multiple criminal groups.

Publishers:thehackernews.com

Reality

Evidence62
Adoption40
Hype gap+8
Incentives: Insufficient
Confidence60

security3 publishers

Compromised Ukrainian business sites are serving a ClickFix lure that installs through msiexec

Arctic Wolf Labs found injected iframes on real Ukrainian business sites showing a Ukrainian-language fake Cloudflare check that copies a Windows Installer command for the visitor to paste into Run. Its exposed panel logged 557 views.

Publishers:arcticwolf.comsecurityaffairs.comthehackernews.com

Perspective Coverage

3 publishers

Builder: Builder 30%
Operator: Operator 64%
Investor: Investor 6%

Reality

Evidence68
Adoption14
Hype gap+8
Incentives35
Confidence64