Loading malware…
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
1 CVE Mallory has correlated with this family across public research and vendor advisories. Each row links to the full Mallory page for that vulnerability.
The leaked tools included a zero-day exploit for Adobe Flash (CVE-2015-5119) as well as sophisticated platforms capable of providing remote access, keylogging, general information recording and exfiltration.
1 distinct threat actor attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
THE GALILEO SOLUTION IS MUCH BETTER THAN THE DA VINCI THEY HAVE IN TOLUCA.
5 distinct techniques documented for this family, organized by ATT&CK tactic.
The leaked tools included ... sophisticated platforms capable of providing remote access, keylogging, general information recording and exfiltration.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Named as another ransomware family that Dr. Shifro claimed it could decrypt.
Earlier Hacking Team surveillance/intrusion platform referenced as an existing deployment in Toluca that the customer considered unsatisfactory.
Hacking Team RCS platform variant used for remote monitoring and data exfiltration from compromised devices.
Commercial surveillance spyware platform sold by Hacking Team that enables monitoring of cell phone conversations, emails, Skype calls, and spying through a target’s webcam and microphone.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.