CSuite Targets US and EU Organizations with Device-Code Phishing and Remote Access
CSuite targets US and EU organizations with device-code phishing and remote access. 60% of identified victims are US-based; 351 related sandbox analyses detected; 23 modules in the phishing panel.
CSuite targets US and EU organizations with device-code phishing and remote access. 60% of victims are US-based; 351 related sandbox analyses detected; 23 modules in the phishing panel.
- Multi-stage phishing and remote-access operation
- ATT&CK
- T1566.001 Spearphishing AttachmentT1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
- Organizations
- Microsoft 365Adobe CloudGoogle MeetDropbox
- AI models
- C Suite
From the original article
13 min read at any.run
ANY. RUN researchers investigated CSuite, a phishing and remote-access operation that combines credential theft, Microsoft 365 session hijacking, and the abuse of legitimate management tools. The campaign showed a strong US focus, with 60% of identified victim organizations based in the United States.
By ShiFu · any.run
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.