Caramel Tsunami

Caramel Tsunami is a threat actor that specializes in spyware attacks. They have recently resurfaced with an updated toolset and zero-day exploits, targeting specific victims through watering hole attacks. Candiru has been observed exploiting vulnerabilities in popular browsers like Google Chrome and using third-party signed drivers to gain access to the Windows kernel. They have also been… Fuente: MISP

Relaciones por coaparición en noticias, no atribución. Fuentes: MISP galaxy y SigmaHQ.