Threat Profiles | PacketWatch | PacketWatch Team Sixty43

9 min read

ClickFix Abuses ‘finger’ To Deliver CastleLoader

PacketWatch Team Sixty43: June 16, 2026

PacketWatch's Team Sixty43 profiles how a ClickFix attack leverages the finger protocol to deliver its first payload (CastleLoader). See the TTPs and IOCs.

4 min read

No CAP: Device Code Phishing

PacketWatch Team Sixty43: May 28, 2026

PacketWatch's Team Sixty43 profiles an M365 threat traced to Device Code Phishing, complete with tactics, techniques, and procedures.

Adversary Threat Profile Threat Actor

4 min read

Evil Vibes: EvilAI and Vibe Coded Malware

PacketWatch Team Sixty43: May 15, 2026

PacketWatch's Team Sixty43 profiles a threat involving EvilAI and Vibe-coded malware, complete with tactics, techniques, and procedures.

Adversary Threat Profile Threat Actor

1 min read

Toxic Trio: KongTuke, ClickFix, and Havoc Campaign

PacketWatch Team Sixty43: May 05, 2026

PacketWatch's Team Sixty43 profiles a threat involving the toxic trio KongTuke, ClickFix, and Havoc, complete with tactics, techniques, and...

Adversary Threat Profile Threat Actor

8 min read

Lynx Ransomware

PacketWatch Team Sixty43: April 22, 2026

Our incident response and threat intelligence professionals provide an extensive profile on Lynx Ransomware and its tactics, techniques, and...

Adversary Threat Profile Threat Actor