Threats Tagged 'khmer shadow'
View all threats tagged with 'khmer shadow'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'khmer shadow'
Click on any threat for detailed analysis and mitigation recommendations
Targeted espionage against Cambodian government entities 0 Two espionage campaigns attributed to the Khmer Shadow cluster targeted Cambodian government entities in defense and public works sectors. The campaigns used a custom C++ loader named NIGHTFORGE delivered via government-themed self-extracting archive lures. NIGHTFORGE employs advanced evasion techniques such as NTDLL unhooking and Hell's Gate syscall resolution to decrypt and execute a Havoc Demon payload in memory. It uses DLL sideloading through a legitimate VMware-signed binary and establishes persistence via COM-based scheduled tasks. Despite technical sophistication, the attacker reused payloads and infrastructure across targets. The campaigns specifically targeted Cambodia's Information Collection Bureau and Ministry of Public Works and Transport using meeting-themed social engineering lures. Join the discussion | AlienVault OTX General | 06/11/2026, 11:50:22 UTC Added: 06/11/2026, 14:45:21 UTC |
Showing 1 to 1 of 1 result