Gold Hawthorne

Gold Hawthorne has been identified by Liberty.

Financially motivated intrusion cluster (less publicly standardized naming)

Associated with:

• Initial access brokering
• Credential harvesting
• Possible ties to ransomware affiliate ecosystems