other

UNK_DoubleCheck

Threat activity group under a provisional Proofpoint designation, observed in espionage-motivated intrusions and not publicly attributed.

Current clusters

security1 publisher

Four China-aligned crews adopted the same Chrome-to-SYSTEM exploit kit inside six days

Proofpoint says APT31 fired first on Aug. 28 and three more espionage groups were running the same three-bug BlueMoon chain by Sept. 3, which points at a shared exploit-kit supplier rather than four separate discoveries.

Publishers:cyberscoop.com

Reality

Evidence55
Adoption45
Hype gap+18
Incentives65
Confidence55

security1 publisher

BlueMoon exploit kit spread to four espionage crews within a week of APT31's first use

Proofpoint says four espionage clusters were running the same undocumented Chrome and Windows exploit chain within a week of its debut, which puts the pacing of browser patching in the hands of whoever ships the kit.

Publishers:thehackernews.com

Reality

Evidence58
Adoption62
Hype gap+12
Incentives55
Confidence57