Loading the current evidence view. Navigation and account controls remain available.
Indicator investigation
Loading the current evidence view. Navigation and account controls remain available.
Loading verdict, provenance, relationships and sightings.
Indicator
Type domain · source intel_report_ingest
Shared non-noise tags (narrow join).
tags: report:microsoft_mstic, report:secureworks
tags: report:microsoft_mstic, report:secureworks
tags: report:microsoft_mstic, report:secureworks
tags: report:microsoft_mstic, report:secureworks
tags: report:microsoft_mstic, report:secureworks
tags: report:microsoft_mstic
tags: report:secureworks
tags: report:secureworks
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
Full investigation canvas with neighbor expansion.
Title/body text match only.
Why AMOS matters: The macOS malware stealing data at scale <p>Sophos X-Ops looks at the Atomic macOS Stealer and its capabilities</p> Categories: Threat Research Tags: MacOS, AMOS, infostealer Why AMOS matters: The macOS malware stealing data at scale | SOPHOS Skip to Content O
ClickFix campaign uses fake macOS utilities lures to deliver infostealers Threat actors are targeting macOS users with fake utility fixes that trick them into running malicious Terminal commands. This campaign evades traditional defenses by stealing credentials, wallets, and sen
Deduped connector weight from graph context.