Evolution of Web3 in Cloud Supply Chain Attacks
Unit 42 says DPRK-linked actors use Web3 smart contracts as C2 for npm worms stealing cloud credentials.
78
Threat actor
Midnight Neptune
- Mentions · 7d0
- Mentions · 30d1
- All mentions2
- First seenSep 9, 2026
- Last mentioned23d ago
Timeline
2 articles · newest firstAI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
Google's Threat Intelligence Group warns AI now gives lesser-resourced criminal and nation-state attackers nation-state-level speed and scale, citing TeamPCP, Basin Castle, APT42, and APT24 usage.
68
Appears with
- npmproduct · 2
- Shai-Huludmalware · 2
- Googlevendor · 1
- arrayrefproduct · 1
- TeamPCPthreat actor · 1
- Basin Castlethreat actor · 1
- UNC6508threat actor · 1
- Palo Alto Networksorganization · 1
- Alluring Piscesthreat actor · 1
- CISAorganization · 1
- APT42threat actor · 1
- Mastra AIproduct · 1
- APT24threat actor · 1
- ChainDropmalware · 1
- PolinRidermalware · 1
- Docker Hubproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.