REF5961: Group Using BLOODALCHEMY Backdoor
REF5961 is a threat group first documented by Elastic Security Labs in October 2023. It was observed using the BLOODALCHEMY backdoor in…
Tag: government
East Asian Threat Actor Targets Middle East Governments with TELESHIM Malware
An unaffiliated East Asian threat actor has been conducting cyber attacks against Middle Eastern government entities, deploying TELESHIM, MIXEDKEY, and BINDCLOAK malware.…
Israel National Cyber Directorate (INCD) Bulletin on DevMan
The Israel National Cyber Directorate (INCD) published a bulletin describing DevMan as a threat actor with a high-profile online presence, often bragging…
TetrisPhantom: APAC Government Threat Actor
TetrisPhantom is a highly skilled and resourceful threat actor first documented by Kaspersky in October 2023. It targets government entities in the…
Armored Likho: Cyber Espionage Group Targeting Government and Power Sector
Armored Likho is a previously undocumented threat actor targeting government agencies and electric power sectors in Russia, Brazil, and Kazakhstan. They blend…
Cisco SD-WAN for Government (FedRAMP)
A FedRAMP-authorized SD-WAN solution for U.S. government agencies, impacted by CVE-2026-20262.