TGViewer
CTT Report Hub CTT Report Hub @aptreports · 3.52K subscribers
Post #32091 36
#ParsedReport #CompletenessMedium
01-09-2026

CaptiveCrunch Part 2: Burning More Threat Actor Infrastructure

https://www.tlp-unclear.com/posts/captivecrunch-part-2-burning-more-infrastructure/

Report completeness: Medium

Actors/Campaigns:
Unc7005
Storm-2945

Threats:
Device_code_phishing_technique

Victims:
Academia, Diplomatic personnel, Non governmental organizations

Industry:
Ngo, Logistic, Education

Geo:
American, United states, Ukrainian, Ukraine

ChatGPT TTPs:
do not use without manual check
T1036, T1056.003, T1584.008

IOCs:
IP: 23
Domain: 27
Email: 8
File: 1

Soft:
WhatsApp, gmail

Languages:
javascript
TLP-Unclear CaptiveCrunch Part 2: Burning More Threat Actor Infrastructure Pivoting on Google’s Findings to Identify More UNC7005/STORM-2945 Infrastructure
More from @aptreports
  1. Oct 12, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  2. Oct 12, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  3. Oct 12, 2026#ParsedReport #CompletenessLow 09-10-2026 It Always Comes Back to DNS: Iranian VPN-over-DN…
  4. Oct 12, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  5. Oct 12, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  6. Oct 12, 2026#ParsedReport #CompletenessMedium 11-10-2026 GhostAction Phishing Campaign https://opensou…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →