Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.
Also known as: COLDRIVER, SEABORGIUM, TA446, GOSSAMER BEAR, BlueCharlie, Star Blizzard, TAG-53, IRON FRONTIER, UNC4057, Blue Callisto, Callisto Group, Cold River, Calisto, Nahr el bared, Nahr Elbard, Cobalt Edgewater, Seaborgium, Grey Pro, Mythic Ursa, Gossamer Bear
In short, “Cold River” is a sophisticated threat (actor) that utilizes DNS subdomain hijacking, certificate spoofing, and covert tunneled command and control traffic in combination with complex and convincing lure documents and custom implants.
No exploited CVEs have been attributed to this threat actor yet.
Browse CVE Database