[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9oM6hOwhnTrA5BwS2QNz7VGIjApMfTc4JZE_pJA0Vd4":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":11,"country":12,"suspected_sponsor":12,"target_industries":13,"target_countries":14,"incident_types":15,"references":16,"techniques":23,"technique_count":24,"created_at":25,"seoMetadata":26,"schemaOrg":30},"Caramel Tsunami","caramel-tsunami",[9,10],"SOURGUM","Candiru","Caramel Tsunami is a threat actor that specializes in spyware attacks. They have recently resurfaced with an updated toolset and zero-day exploits, targeting specific victims through watering hole attacks. Candiru has been observed exploiting vulnerabilities in popular browsers like Google Chrome and using third-party signed drivers to gain access to the Windows kernel. They have also been linked to other spyware vendors and have been associated with extensive abuses of their surveillance tools.",null,[],[],[],[17,18,19,20,21,22],"https:\u002F\u002Fdecoded.avast.io\u002Fthreatresearch\u002Favast-q2-2022-threat-report\u002F","https:\u002F\u002Fdecoded.avast.io\u002Fjanvojtesek\u002Fthe-return-of-candiru-zero-days-in-the-middle-east\u002F","https:\u002F\u002Fcitizenlab.ca\u002F2022\u002F04\u002Fcatalangate-extensive-mercenary-spyware-operation-against-catalans-using-pegasus-candiru\u002F","https:\u002F\u002Fcitizenlab.ca\u002F2021\u002F12\u002Fpegasus-vs-predator-dissidents-doubly-infected-iphone-reveals-cytrox-mercenary-spyware\u002F","https:\u002F\u002Fwww.welivesecurity.com\u002F2021\u002F11\u002F16\u002Fstrategic-web-compromises-middle-east-pinch-candiru\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2021\u002F07\u002F15\u002Fprotecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware\u002F",[],0,"2024-02-02T02:15:03.218569+00:00",{"title":27,"metaDescription":28,"keywords":29},"Caramel Tsunami Threat Actor Profile | EdgeProtect","Caramel Tsunami is a threat actor that specializes in spyware attacks. They have recently resurfaced with an updated toolset and zero-day exploits, ta...","Caramel Tsunami, SOURGUM, Candiru, threat actor, APT, cyber threat, threat intelligence",{"@context":31,"@type":32,"name":6,"alternateName":33,"description":11,"url":34,"mainEntityOfPage":35},"https:\u002F\u002Fschema.org","Organization",[9,10],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fcaramel-tsunami",{"@type":36,"@id":34},"WebPage"]