Phlox Tempest

MISP
Tipo:
Unknown
Paese:
Unknown
Prima attivita:
Unknown
Dettagli:

Phlox Tempest is a threat actor responsible for a large-scale click fraud campaign targeting users through YouTube comments and malicious ads. They use ChromeLoader to infect victims' computers with malware, often delivered as ISO image files that victims are tricked into downloading. The attackers aim to profit from clicks generated by malicious browser extensions or node-WebKit installed on the victim's device. Microsoft and other cybersecurity organizations have issued warnings about this ongoing and prevalent campaign.

Riferimenti (1)
Alias (107)
DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796 DEV-0796
Metadata
ID: 595
Created: 13/01/2026 17:48
Updated: 08/03/2026 04:00