Mexican entities continue to be aimed at by threat actors to propagate a altered iteration of AllaKore RAT and SystemBC as a segment of an ongoing campaign.
Arctic Wolf Labs has linked this activity to a profit-driven hacking collective known as Greedy Sponge. It is thought to have been operational since the start of 2021, indiscriminately assaulting a vast assortment of industries, including retail,