CloudSEK TRIAD (adversary intelligence)
cloudsek-triad · B · candidate
Added 2026-10-07: S3 candidate; the feed https://www.cloudsek.com/blog/rss.xml was verified working (/feed and /rss.xml return 404). The Caught in 4K series reads exposed attacker infrastructure first-hand; the Gentlemen affiliate report is the primary of a published entry.
Cited in 2 entries
Citation cadence
Citation days per ISO week (5 weeks of coverage span, total 2).
- A Gentlemen ransomware affiliate ran his own leak site and reached his victims through stolen CI/CD secrets, with attack commands driven through an MCP server (CloudSEK)2026-10-07
- BigBear 2.0, an Evilginx2-based Microsoft 365 phishing-as-a-service panel that JavaScript-disables FIDO2/WebAuthn to force victims onto phishable MFA, leased to at least five affiliates2026-09-08