[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCekIpWVebO1AoixzSMEWXl13S_WzoO2tRpfZLdBLq6c":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":11,"country":12,"suspected_sponsor":13,"target_industries":14,"target_countries":15,"incident_types":16,"references":17,"techniques":21,"technique_count":22,"created_at":23,"seoMetadata":24,"schemaOrg":28},"Denim Tsunami","denim-tsunami",[9,10],"KNOTWEED","DSIRF","Denim Tsunami is a threat actor group that has been involved in targeted attacks against European and Central American customers. They have been observed using multiple Windows and Adobe 0-day exploits, including one for CVE-2022-22047, which is a privilege escalation vulnerability. Denim Tsunami developed a custom malware called Subzero, which has capabilities such as keylogging, capturing screenshots, data exfiltration, and running remote shells. They have also been associated with the Austrian spyware distributor DSIRF.","AT",null,[],[],[],[18,19,20],"https:\u002F\u002Fwww.thezdi.com\u002Fblog\u002F2023\u002F1\u002F23\u002Factivation-context-cache-poisoning-exploiting-csrss-for-privilege-escalation","https:\u002F\u002Fsocradar.io\u002Fthreats-of-commercialized-malware-knotweed\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fsecurity\u002Fblog\u002F2022\u002F07\u002F27\u002Funtangling-knotweed-european-private-sector-offensive-actor-using-0-day-exploits\u002F",[],0,"2024-02-02T02:15:03.218569+00:00",{"title":25,"metaDescription":26,"keywords":27},"Denim Tsunami Threat Actor Profile | EdgeProtect","Denim Tsunami is a threat actor group that has been involved in targeted attacks against European and Central American customers. They have been obser...","Denim Tsunami, KNOTWEED, DSIRF, threat actor, APT, cyber threat, threat intelligence, AT",{"@context":29,"@type":30,"name":6,"alternateName":31,"description":11,"url":32,"mainEntityOfPage":33,"location":35},"https:\u002F\u002Fschema.org","Organization",[9,10],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fdenim-tsunami",{"@type":34,"@id":32},"WebPage",{"@type":36,"name":12},"Country"]