Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| payload · XMRigcampaign | Uses | T1547.001technique | — | Correlated cluster | 2026-09-03 |
| PowerShell-based RATcampaign | Uses | T1557.001technique | — | Correlated cluster | 2026-08-31 |
| JSCealcampaign | Uses | T1608.006technique | — | Correlated cluster | 2026-09-02 |
| CornFlakecampaign | Uses | T1547.001technique | — | Correlated cluster | 2026-08-20 |
| CornFlakecampaign | Uses | T1543.003technique | — | Correlated cluster | 2026-08-20 |
| msaRATcampaign | Uses | T1204.002technique | — | Correlated cluster | 2026-09-01 |
| T1078campaign | Uses | T1621technique | — | Correlated cluster | 2026-08-18 |
| payload · XMRigcampaign | Uses | T1003technique | — | Correlated cluster | 2026-08-26 |
| JWRcampaign | Uses | T1140technique | — | Correlated cluster | 2026-09-14 |
| T1499campaign | Uses | T1005technique | — | Correlated cluster | 2026-08-13 |
| T1499campaign | Uses | T1499technique | — | Correlated cluster | 2026-08-13 |
| AnyDeskcampaign | Uses | T1021.006technique | — | Correlated cluster | 2026-09-17 |
| AnyDeskcampaign | Uses | T1572technique | — | Correlated cluster | 2026-09-17 |
| msaRATcampaign | Uses | T1567technique | — | Correlated cluster | 2026-09-01 |
| AnyDeskcampaign | Uses | T1041technique | — | Correlated cluster | 2026-09-17 |
| payload · XMRigcampaign | Uses | T1218technique | — | Correlated cluster | 2026-09-03 |
| Ransomwarecampaign | Uses | T1486technique | — | Correlated cluster | 2026-09-02 |
| XZ Utils backdoorcampaign | Uses | T1005technique | — | Correlated cluster | 2026-08-21 |
| msaRATcampaign | Uses | T1189technique | — | Correlated cluster | 2026-09-01 |
| QRCode/Phishingcampaign | Uses | T1566.001technique | — | Correlated cluster | 2026-08-19 |
| UNC1549 / TA455 · NightLedgercampaign | Uses | T1090.003technique | — | Correlated cluster | 2026-08-12 |
| AnyDeskcampaign | Uses | T1584.004technique | — | Correlated cluster | 2026-09-17 |
| infostealercampaign | Uses | T1027technique | — | Correlated cluster | 2026-09-09 |
| PhantomCorecampaign | Uses | T1587.001technique | — | Correlated cluster | 2026-08-25 |
| FudModulecampaign | Uses | T1055technique | — | Correlated cluster | 2026-09-03 |
| UNC1549 / TA455 · NightLedgercampaign | Uses | T1476technique | — | Correlated cluster | 2026-08-12 |
| PromptSpycampaign | Uses | T1566technique | — | Correlated cluster | 2026-09-03 |
| XZ Utils backdoorcampaign | Uses | T1027technique | — | Correlated cluster | 2026-08-21 |
| AnyDeskcampaign | Uses | T1219technique | — | Correlated cluster | 2026-09-17 |
| T1078campaign | Uses | T1213technique | — | Correlated cluster | 2026-08-07 |
| Cyclops Blinkcampaign | Uses | T1190technique | — | Correlated cluster | 2026-09-10 |
| UNC1549 / TA455 · NightLedgercampaign | Uses | T1204.002technique | — | Correlated cluster | 2026-08-12 |
| payload · XMRigcampaign | Uses | T1041technique | — | Correlated cluster | 2026-08-26 |
| payload · XMRigcampaign | Uses | T1585.002technique | — | Correlated cluster | 2026-09-03 |
| MacSynccampaign | Uses | T1583.001technique | — | Correlated cluster | 2026-08-18 |
| CornFlakecampaign | Uses | T1071.001technique | — | Correlated cluster | 2026-08-20 |
| Warlock · MeshAgentcampaign | Uses | T1090.003technique | — | Correlated cluster | 2026-09-03 |
| AnyDeskcampaign | Uses | T1489technique | — | Correlated cluster | 2026-09-17 |
| msaRATcampaign | Uses | T1566.004technique | — | Correlated cluster | 2026-09-01 |
| XZ Utils backdoorcampaign | Uses | T1552.001technique | — | Correlated cluster | 2026-08-21 |
| fscancampaign | Uses | T1027technique | — | Correlated cluster | 2026-09-02 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Uses | T1486technique | — | Correlated cluster | 2026-09-16 |
| STOCKSTAYcampaign | Uses | T1036technique | — | Correlated cluster | 2026-08-04 |
| Warlock · MeshAgentcampaign | Uses | T1071technique | — | Correlated cluster | 2026-09-03 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Uses | T1059.003technique | — | Correlated cluster | 2026-09-16 |
| BadIIScampaign | Uses | T1213technique | — | Correlated cluster | 2026-08-26 |
| infostealercampaign | Uses | T1555.003technique | — | Correlated cluster | 2026-09-09 |
| infostealercampaign | Uses | T1566technique | — | Correlated cluster | 2026-09-09 |
| PhantomCorecampaign | Uses | T1553.002technique | — | Correlated cluster | 2026-08-25 |
| payload · XMRigcampaign | Uses | T1548.002technique | — | Correlated cluster | 2026-09-03 |