TetrisPhantom is a cyber espionage group focused on obtaining sensitive information from government networks in the Asia-Pacific region. The group is assessed to be state-sponsored, exhibiting a strong interest in sensitive and protected government networks. They are distinguished by their unique method of compromising secure USB drives to access and exfiltrate data from targeted systems, including air-gapped environments. This group was first observed developing malware modules in September 2021, with their campaigns detected in early 2023. TetrisPhantom operates without known overlaps with other named threat actors.