← threat actors
malware and tools
- darkhotel malware 1 · Aug 14
techniques
- evasion 1 · Aug 14
- injection 1 · Aug 14
- persistence 1 · Aug 14
attack phases seen
- Defense evasion 1 · Aug 14
- Execution 1 · Aug 14
- Persistence 1 · Aug 14
what we reported, newest first, grouped by story
August 14, 2026
- DarkHotel (APT-C-06) malicious MSI chain. Nextron identified samples that run AV/environment checks, create scheduled tasks, and pull PowerShell-staged payloads with shellcode injection for evasion. (Nextron)
· Aug 14 · observed · Threat Activity