Loading threat actor…
KuroCracks is a cybercriminal persona observed advertising an open-source scanner for CVE-2024-10914 designed to automate internet-scale discovery and exploitation of vulnerable systems. The tool was promoted as suitable for botnet-building, indicating an operational focus on mass exploitation and recruitment of compromised devices rather than targeted intrusion. Reported functionality combined high-speed scanning with exploit delivery, reflecting capabilities aligned with vulnerability weaponization and early-stage compromise automation. KuroCracks has also been associated with the use of generative AI to optimize offensive tooling, illustrating how lower-tier or opportunistic actors are incorporating commercial AI assistance into exploit development workflows. Available information supports characterization of KuroCracks as an opportunistic criminal actor involved in scanning and initial-access activity, with apparent relevance to botnet operations. No high-confidence attribution to a nation state, specific country of origin, or broader organizational structure is currently available.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.