Threat Actors

TA4922 Targets UK, Germany, Italy and South Africa With New RATs and Loaders

Proofpoint warns the financially motivated group uses localized tax and HR phishing, abuses legitimate remote‑management tools, deploys possible AI‑assisted Python malware, resells stolen access