Google Cloud Platform

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 17, 2026
Last mentionedSep 18, 2026

Timeline

2 articles · newest first

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

DPRK TraderTraitor's FLATROOF and ROOFDECK macOS backdoors resurfaced on an Indian IT services victim, delivered via weaponized Terraform lock files in fake job interviews.

SentinelLABSSep 18, 17:00 UTC · Sep 18, 2026Threat actorExploited1

Attack Paths Into VMs in the Cloud

Unit 42 maps attack paths into AWS, Azure, and GCP VMs through intended features like startup scripts and SSH key pushes.

Palo Alto Unit 42Aug 17, 12:36 UTC · Aug 17, 2026Research5 · 1 read

Appears with

Amazon Web Servicesvendor · 2
GitHubvendor · 1
Microsoft Azurevendor · 1
Palo Alto Networksorganization · 1
Amazon Web Servicesorganization · 1
Ansibleproduct · 1
Palo Alto Networksvendor · 1
Lazarusthreat actor · 1
Microsoft Azureorganization · 1
FLATROOFmalware · 1
TraderTraitorthreat actor · 1
Unit 42organization · 1
KelpDAOvictim · 1
SentinelOnevendor · 1
Google Cloud Platformorganization · 1
LayerZerovictim · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.