216.73.217.80

CopyRh(ight)adamantys Campaign: Rhadamantys Exploits Intellectual Property Infringement Baits

· Published 06/11/2024 18:33 · Modified 06/11/2024 20:33

Export JSON

Essential information

Published
06/11/2024 18:33
Modified
06/11/2024 20:33
Tags
2024-11-06 copyright ocr phishing rhadamanthys stealer
Related entities
19 techniques (mitre), 1 malware, 4 others

Description

A large-scale campaign deploying the latest version of (0.7) has been discovered. The campaign, dubbed CopyRh(ight)adamantys, uses infringement claims to target various regions globally. It impersonates numerous companies, mainly from Entertainment/Media and Technology/Software sectors, sending tailored emails to specific entities. The campaign's sophistication suggests the use of automation and possibly AI tools for lure distribution. The latest version claims to include AI-powered text recognition, though analysis reveals it uses older machine learning techniques typical of software. The campaign's wide targeting and tactics indicate it's likely orchestrated by a financially motivated cybercrime group rather than a nation-state actor.

External references