CaptiveCrunch Part 2: Burning More Threat Actor Infrastructure

Building on Google’s findings, this report uncovers extensive new phishing and C2 infrastructure linked to UNC7005/STORM-2945, revealing a rapidly expanding, highly targeted campaign against Western, Ukrainian, and NGO entities through sophisticated domain masquerading and infrastructure reuse.