Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.
Also known as: Grey Pro, TA446, IRON FRONTIER, Mythic Ursa, Nahr el bared, Gossamer Bear, UNC4057, Calisto, BlueCharlie, TAG-53, COLDRIVER, SEABORGIUM, Blue Callisto, Seaborgium, Nahr Elbard, Cobalt Edgewater, Cold River, Star Blizzard, Callisto Group
In short, “Cold River” is a sophisticated threat (actor) that utilizes DNS subdomain hijacking, certificate spoofing, and covert tunneled command and control traffic in combination with complex and convincing lure documents and custom implants.
No exploited CVEs have been attributed to this threat actor yet.
Browse CVE Database