Threat Investigation
Request a demo
Other threat group

Caramel Tsunami

Caramel Tsunami is classified as other threat group.

Malware families
1
Also known as
2

Caramel Tsunami is a threat actor that specializes in spyware attacks. They have recently resurfaced with an updated toolset and zero-day exploits, targeting specific victims through watering hole attacks. Candiru has been observed exploiting vulnerabilities in popular browsers like Google Chrome and using third-party signed drivers to gain access to the Windows kernel. They have also been linked to other spyware vendors and have been associated with extensive abuses of their surveillance tools.

The group is associated with 1 malware families.

Also known as: SOURGUM, Candiru

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Caramel Tsunami · Threat actors · Dark Radar