corpus.blog
41,554 blogs · 5,197,919 posts Claim your blog
Record · corpus.blog/posts/01a0d4a5-1a4e-7032-821a-20ec19ae9970

Novel Technique to Detect Cloud Threat Actor Operations

Unit 42 · published 6 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
42
Words captured
5,117

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.microsoft.com/en-us/security/security-insider/threat-landscape/silk-typhoon
microsoft.com
https://www.paloaltonetworks.com/resources/datasheets/unit-42-cloud-security-assessment
paloaltonetworks.com
https://attack.mitre.org/tactics/TA0006/
attack.mitre.org
https://attack.mitre.org/techniques/T1528/
attack.mitre.org
https://attack.mitre.org/techniques/T1552/
attack.mitre.org
https://attack.mitre.org/techniques/T1530/
attack.mitre.org
https://www.cisa.gov/news-events/alerts/2025/07/29/cisa-and-partners-release-updated-advisory-scattered-spider-group
cisa.gov
https://www.halcyon.ai/blog/scattered-spider-tactics-observed-amid-shift-to-us-targets
halcyon.ai
https://github.com/sense-of-security/ADRecon
github.com
https://attack.mitre.org/groups/G1015/
attack.mitre.org
https://attack.mitre.org/techniques/T1578/002/
attack.mitre.org
https://attack.mitre.org/techniques/T1078/004/
attack.mitre.org
https://attack.mitre.org/techniques/T1069/003/
attack.mitre.org
https://attack.mitre.org/techniques/T1087/004/
attack.mitre.org
https://attack.mitre.org/techniques/T1526/
attack.mitre.org
https://attack.mitre.org/techniques/T1538/
attack.mitre.org
https://attack.mitre.org/techniques/T1580/
attack.mitre.org
https://attack.mitre.org/techniques/T1021/007/
attack.mitre.org
https://attack.mitre.org/techniques/T1098/001/
attack.mitre.org
https://attack.mitre.org/techniques/T1098/003/
attack.mitre.org
https://industrialcyber.co/transport/fbi-raises-alarm-over-scattered-spider-targeting-airline-sector-with-social-engineering-schemes/
industrialcyber.co
https://attack.mitre.org/techniques/T1535/
attack.mitre.org
https://attack.mitre.org/techniques/T1619/
attack.mitre.org
https://attack.mitre.org/techniques/T1098/
attack.mitre.org
https://attack.mitre.org/techniques/T1136/
attack.mitre.org
https://attack.mitre.org/techniques/T1020/
attack.mitre.org
https://techcommunity.microsoft.com/blog/microsoftsecurityexperts/octo-tempest-hybrid-identity-compromise-recovery/4166783
techcommunity.microsoft.com
https://learn.microsoft.com/en-us/graph/use-the-api
learn.microsoft.com
https://www.microsoft.com/en-us/security/blog/2021/03/02/hafnium-targeting-exchange-servers/
microsoft.com
https://www.microsoft.com/en-us/security/blog/2025/03/05/silk-typhoon-targeting-it-supply-chain/
microsoft.com
https://attack.mitre.org/groups/G0125/
attack.mitre.org
https://attack.mitre.org/techniques/T1119/
attack.mitre.org
https://attack.mitre.org/techniques/T1555/006/
attack.mitre.org
https://attack.mitre.org/techniques/T1550/001/
attack.mitre.org
https://attack.mitre.org/techniques/T1567/002/
attack.mitre.org
https://attack.mitre.org/techniques/T1485/
attack.mitre.org
https://attack.mitre.org/techniques/T1190/
attack.mitre.org
https://attack.mitre.org/techniques/T1136/003/
attack.mitre.org
https://docs-cortex.paloaltonetworks.com/r/Cortex-CLOUD/Cortex-Cloud-Runtime-Security-Documentation/Endpoint-protection
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Premium-Documentation/Serverless-function-security
docs-cortex.paloaltonetworks.com
https://attack.mitre.org/matrices/enterprise/cloud/
attack.mitre.org
https://www.volexity.com/blog/2021/03/02/active-exploitation-of-microsoft-exchange-zero-day-vulnerabilities/
volexity.com
Elsewhere on unit42.paloaltonetworks.com (11)
https://unit42.paloaltonetworks.com/tag/muddled-libra/
unit42.paloaltonetworks.com
https://unit42.paloaltonetworks.com/tag/scattered-spider/
unit42.paloaltonetworks.com
https://unit42.paloaltonetworks.com/tag/api-attacks/
unit42.paloaltonetworks.com
https://unit42.paloaltonetworks.com/tag/iam/
unit42.paloaltonetworks.com
Cloud Threats on the Rise: Alert Trends Show Intensified Attacker Focus on IAM, Exfiltration Read at the source ↗
unit42.paloaltonetworks.com
Muddled Libra Threat Assessment: Further-Reaching, Faster, More Impactful Read at the source ↗
unit42.paloaltonetworks.com
2025 Unit 42 Global Incident Response Report: Social Engineering Edition Read at the source ↗
unit42.paloaltonetworks.com
Muddled Libra’s Strike Teams: Amalgamated Evil Read at the source ↗
unit42.paloaltonetworks.com
Threat Group Assessment: Muddled Libra (Updated May 16, 2025) Read at the source ↗
unit42.paloaltonetworks.com
Analyzing Attacks Against Microsoft Exchange Server With China Chopper Webshells Read at the source ↗
unit42.paloaltonetworks.com
Threat Actor Groups Tracked by Palo Alto Networks Unit 42 (Updated Aug. 1, 2025) Read at the source ↗
unit42.paloaltonetworks.com