Is this threat intelligence attributable to named actors?

Published briefings describe behaviour and infrastructure patterns. Named attribution of individuals or groups is not published; it belongs in case-specific work product produced for counsel or authorities.

How current is the material?

Briefings carry an explicit update date and describe patterns observed in engagements up to that point. Infrastructure changes rapidly, so indicators should be treated as contextual rather than definitive.

Intelligence Topic · Last updated 2026-08-03

Threat Intelligence

Threat intelligence here means the observable behaviour of fraud operations: the platforms they deploy, the infrastructure they reuse, the scripts and escalation patterns applied to targets, and the indicators that appear before a loss is realised.

Briefings are written for compliance functions, counsel and investigators who need pattern-level context to assess an individual matter.

5 indexed resources

Scope of this topic

·Fraud platform and hosting infrastructure patterns
·Social engineering escalation and script analysis
·Indicators observable before and during a loss event
·Reuse of infrastructure across apparently unrelated matters
·Risk framing for compliance and onboarding review