ROADtools weaponisation (Entra ID)
campaign · campaign:roadtools-weaponised-by-midnight-blizzard-curious-serpens-uta0355-entra-id
ROADtools weaponised by Midnight Blizzard (APT29), Curious Serpens (APT33) and UTA0355 for Entra ID device registration, token theft and tenant enumeration.
Coverage timeline
0
first 2026-05-23 → last –
no data
Peak priority
—
no matching entries
Sources cited
0
0 hosts
Sections touched
0
—
Co-occurring entities
0
no co-occurrence
ATT&CK techniques
0
no mapped behavior yet
Story timeline
No published entries reference this entity yet.
Entries about ROADtools weaponisation (Entra ID)
No published entry references this entity yet · entries match by registry key, by the entity's name or a public alias appearing in the entry title or body, or (for CVE entities) by exact CVE id.