SAP Concur is a technology platform tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
SAP Concur is a technology platform tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed August 6, 2026; most recent activity August 6, 2026.
Insikt Group identified GrayAlpha, a threat actor linked to FIN7, utilizing a custom loader named MaskBat to deploy NetSupport RAT through various infection vectors. These include fake browser update pages, fake 7-Zip…
SAP Concur is a technology platform tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
The most recent intelligence report mentioning SAP Concur on ThreatCluster is dated August 6, 2026.
Across ThreatCluster reporting, SAP Concur most frequently co-occurs with FIN7, Malware, Asana, CNN, LexisNexis, among 12 tracked related entities.
The most significant recent cluster is “GrayAlpha Threat Actor Uses MaskBat Loader for NetSupport RAT Deployments” (2 articles · Updated August 6, 2026). SAP Concur appears across 1 threat cluster in total, listed above with sources.
SAP Concur appears in 1 intelligence report mention across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.