Threat Intel
Malware, threat actors, campaigns, infrastructure, and whatever connects them.
Confidence is included when it matters because guessing with a serious face is not attribution.
-
THREAT ACTOR
BRITTLE COMPASS
A fake-indie-game delivery cluster that swapped one stealer kit for another behind the same download button.
-
MALWARE
EXASTEALER 2.0.0: a commercial stealer panel moves in
The third BRITTLE COMPASS build. Command and control moves from a Discord bot to a licensed panel, with a UAC bypass, wallet theft, a SOCKS proxy and a Settings lockout.
-
MALWARE
MICROSTEALER 1.2.6: a Discord-bot RAT in a game’s clothing
The second BRITTLE COMPASS build. A Java remote access tool that runs its operator’s commands from a Discord server and keeps a ransomware option.
-
MALWARE
BRITTLE COMPASS 1.2.5: an Electron stealer that rewrites Discord
The first BRITTLE COMPASS build. Asks for admin, steals browsers, wallets and files, and leaves a modified Discord client behind.