The threat actor known as TA558 has been attributed to a fresh set of attacks delivering various remote access trojans (RATs) like Venom RAT to breach hotels in Brazil and Spanish-speaking markets.
Russian cybersecurity vendor Kaspersky is tracking the activity, observed in summer 2025, to a cluster it tracks as RevengeHotels.
"The threat actors continue to employ phishing emails with invoice



Source: TheHackerNews
Source Link: https://thehackernews.com/2025/09/ta558-uses-ai-generated-scripts-to.html