ClearSky

Mentions · 7d0
Mentions · 30d1
All mentions2
First seenAug 17, 2026
Last mentioned25d ago

Timeline

2 articles · newest first

Earth Sirrush Espionage Activity May Support Sandworm Operations Against Ukraine

Earth Sirrush has spear-phished Ukrainian government and logistics since 2022, possibly feeding Sandworm.

GBHackersupdated Oct 7, 12:39 UTC · 25d agofirst Oct 7, 08:01 UTC · 25d agoThreat actorExploited2 sourcesCVE-2023-388318 · 2 reads

New Python-Based Payload MechaFlounder Used by Chafer

Unit 42 identified MechaFlounder, a new Python backdoor used by the Chafer group to target a Turkish government entity via HTTP-based C2.

Palo Alto Unit 42Aug 17, 13:22 UTC · Aug 17, 2026Threat actor2

Related CVEs

by mentions

CVE-2023-38831100%7.8
Code Execution in RARLAB WinRAR via Crafted ZIP File/Folder Name Confusion
published Aug 23, 2023RARLAB WinRARKEVRansomwarePoC ×4

Appears with

SEAGLOWmalware · 1
Sandwormthreat actor · 1
Ukrainian logistics organizationsvictim · 1
Notepad++product · 1
ESETorganization · 1
Ukrainian governmentvictim · 1
Earth Sirrushthreat actor · 1
CERT-UAorganization · 1
NordDragonScanmalware · 1
MATCHBOILmalware · 1
Fortinetorganization · 1
ASHVEINmalware · 1
Deep Instinctorganization · 1
Turkish government entityvictim · 1
CINDERBLOTmalware · 1
OilRigthreat actor · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned 25d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.