01-09-2026
CaptiveCrunch Part 2: Burning More Threat Actor Infrastructure
https://www.tlp-unclear.com/posts/captivecrunch-part-2-burning-more-infrastructure/
Report completeness: Medium
Actors/Campaigns:
Unc7005
Storm-2945
Threats:
Device_code_phishing_technique
Victims:
Academia, Diplomatic personnel, Non governmental organizations
Industry:
Ngo, Logistic, Education
Geo:
American, United states, Ukrainian, Ukraine
ChatGPT TTPs:
do not use without manual checkT1036, T1056.003, T1584.008
IOCs:
IP: 23
Domain: 27
Email: 8
File: 1
Soft:
WhatsApp, gmail
Languages:
javascript