Unit 42

@unit42_intel · Twitter · 2026-09-09 17:30 UTC

We continue to actively track newly created infrastructure likely associated with Com-affiliated threat actors that are used as part of their data theft and extortion campaigns. We've identified 17 FQDNs since our last post on Aug. 28th. Details on GitHub: https://bit.ly/4d3JdYc