other

PUROSANGUE

Packaging component of the Cruciferra crypter service used to build side-loaded DLL loaders, some of them carrying code to kill antivirus and EDR processes.

Current clusters

security2 publishers

Rapuncel ships a Microsoft-attested kernel driver built to terminate 145 security products

LastPass traced a fake Authenticator hosted on GitHub to a months-long impersonation campaign that spoofed at least 40 organizations, including its own brand. The server steering victims to the download was still being updated in September.

Publishers:securityweek.comthehackernews.com

Reality

Evidence58
Adoption45
Hype gap+12
Incentives62
Confidence55