Who is ELUSIVE COMET?

ELUSIVE COMET is a threat actor attributed to KP. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does ELUSIVE COMET exploit?

Specific CVE exploitation data for ELUSIVE COMET is being tracked. Check the Strobes VI threat actor profile for updates.

ELUSIVE COMET

Exploited CVEs

Overview

ELUSIVE COMET is a threat actor responsible for significant cryptocurrency theft through sophisticated social engineering attacks, particularly leveraging Zoom's remote control feature. Their attack methodology involves manipulating legitimate workflows and exploiting human-centric vulnerabilities rather than technical flaws. The actor employs tactics such as social proof, time pressure, and interface manipulation to deceive targets. Organizations can mitigate risks by implementing technical controls to disable the remote control feature and deploying email boundary protections like DMARC, SPF, and DKIM.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database