Updated on 2022-11-22
Yoroi founder and CEO Marco Ramilli published a report on recent developments in the operations of Hagga, a threat actor known for distributing infostealer trojans. Recent changes include the adoption of Fsociety Tools, an open-source penetration testing framework. Read more:
- Is Hagga Threat Actor (ab)using FSociety framework ?
- An Analysis of Infrastructure linked to the Hagga Threat Actor
Overview: Hagga group
Team Cymru published a report on the backend infrastructure of Hagga, a threat actor that has been known to distribute infostealers since the start of 2020. The group is also known as Aggah in some reports.