216.73.217.22

Phoenix Hyena

· Published 21/12/2025 13:35 · Modified 21/12/2025 13:35 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 13:35
Modified
21/12/2025 13:35
Updated at
21/12/2025 13:35
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 12 attack patterns (mitre), 2 malware, 2 countries

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (12)

  • T1059.006 uses
    Python
  • T1036 uses
    Masquerading
  • T1195 uses
    Supply Chain Compromise
  • T1204.002 uses
    Malicious File
  • T1027 uses
    Obfuscated Files or Information
  • T1553 uses
    Subvert Trust Controls
  • T1102 uses
    Web Service
  • T1571 uses
    Non-Standard Port
  • T1573 uses
    Encrypted Channel
  • T1132 uses
    Data Encoding
  • T1105 uses
    Ingress Tool Transfer
  • T1036.004 uses
    Masquerade Task or Service

Malware (2)

  • dbgpkg uses
    Family
    Published 15/05/2025 20:12 · Modified 15/05/2025 20:12
  • discordpydebug uses
    Family
    Published 15/05/2025 20:12 · Modified 15/05/2025 20:12

Countries (2)

  • Ukraine targets
  • Russian Federation targets