DarkHalo after SolarWinds: the Tomiris connectionWe discovered a campaign delivering the Tomiris backdoor that shows a number of similarities with the Sunshuttle malware distributed by DarkHalo APT and target overlaps with Kazuar.
Source:
DarkHalo after SolarWinds: the Tomiris connection
