Uptime Hamster: 10d 12h 39mDeploy: 14 Jul 2026 21:26Updated: 2026-07-21
Logo del actor de amenaza PhantomCore

PhantomCore

0 incidentes 0 paises 0 sectores apt RU Ultimo: -
Aliases: cargotalon, eaglet implant, headmare, phantomc2, phantomcore, phantomocx, phantomproxylite, phantomremote, ung0901
Ver en IntelTracker → APTTrail →
PhantomCore is a politically and financially motivated cyberespionage group active since 2022, notably intensifying its activities following the Russo-Ukrainian conflict. The group is also known by aliases such as Fairy Trickster, Head Mare, Rainbow Hyena, and UNG0901. While some reporting links the name 'PhantomCore' to a malware family used by the Head Mare group, authoritative sources also identify PhantomCore as a distinct threat actor group, and the group's operations are consistently described as those of a cyberespionage entity. Its primary motivation involves gaining access to confidential information and disrupting target networks, often deploying ransomware. A defining characteristic is its dual nature, operating as a pro-Ukrainian hacktivist entity while also exhibiting financial motivations through ransomware deployment.

Aliases del actor

cargotaloneaglet implantheadmarephantomc2phantomcorephantomocxphantomproxylitephantomremoteung0901

Actores similares

cargotalonactor · 1UNG0901apt · 0
Malware asociado
BlueNoroff, Remcos RAT, Remcos RAT, AveMaria
Tecnicas MITRE
T1021 - Remote Services, T1003 - OS Credential Dumping, T1102.002 - Bidirectional Communication, T1547.001 - Registry Run Keys / Startup Folder, T1212 - Exploitation for Credential Access, T1090.001
CVEs relacionadas
CVE-2025-55182, CVE-2025-33073, CVE-2025-24071, CVE-2025-24054, CVE-2025-11002, CVE-2025-11001
Tipo
apt
Pais origen
RU
Motivacion
-
Impacto
98
Actualizado
Sat, 25 Ma

Paises objetivo (SOCRadar)

BelarusChinaColombiaGermanyHong KongKazakhstanLebanonPhilippinesPakistanSerbia

Sectores objetivo (SOCRadar)

Construction of BuildingsFood ManufacturingSoftware PublishersAir TransportationManufacturingConstructionPublic AdministrationOil & GasEducational ServicesData Processing Services