CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

REF5961: Group Using BLOODALCHEMY Backdoor

August 19, 2026

REF5961 is a threat group first documented by Elastic Security Labs in October 2023. It was observed using the BLOODALCHEMY backdoor in attacks targeting government organizations in Southern and Southeast Asia.