ToddyCat is an advanced persistent threat (APT) group active since at least 2020, known for targeting organizations in Europe and Asia. The group focuses on compromising corporate email communications, using custom tools like TCSectorCopy for Microsoft Outlook data theft and Umbrij for OAuth token abuse against Gmail accounts.