TA569 SocGholish Overlap w/TA582 Infra

Aaron Samala May 25, 2025 No Comments

Intro This is the long form of my post from here: https://x.com/MalasadaTech/status/1924982337689027063. While browsing urlscan scan tasks, I found crypto-js.min.js usage for obfuscation linked to Tycoon and Storm1747 in Any…