#UNK_CraftyCamel

🔍 Proofpoint is tracking this new threat actor cluster as #UNK_CraftyCamel.

The nature of the campaign and numerous attempts to obfuscate the malware indicate an adversary with a clear mandate. Broader analysis indicates possible connections with Iranian-aligned adversaries.

Call It What You Want: Threat Actor Delivers Highly Targeted Multistage Polyglot Malware | Proofpoint US Key findings  Proofpoint researchers identified a highly targeted email-based campaign targeting fewer than five Proofpoint customers in the United Arab Emirates with a distinct

Introducing #UNK_CraftyCamel!

Leveraged Trusted Business Relationship? ✅
Low Volume, highly targeted? ✅
Interesting technique? ✅
Overlaps with other IRGC clusters? ✅
Bonus: Infrastructure still up to watch how they respond to the blog? ✅

www.proofpoint.com/us/blog/thre...