ToddyCat is an advanced persistent threat (APT) group first observed in December 2020, primarily conducting cyber espionage against high-profile government, military, and telecommunications entities across Europe and Asia. Initially, the group focused on compromising Microsoft Exchange servers before expanding its operations to target desktop machines. ToddyCat consistently updates its toolkit and tactics, including exploiting vulnerabilities in security software and engaging in supply chain attacks. The group is characterized by its use of custom tools such as the Samurai backdoor and Ninja Trojan, coupled with disposable malware designed to evade detection and establish multiple persistent access tunnels within compromised networks. Its core motivation is intelligence gathering, likely driven by geopolitical objectives. While ToddyCat's precise origin remains unconfirmed, observed tactics and victimology indicate parallels with several Chinese-speaking threat groups, and China is a s

Aliases del actor

WebsiicAPT TODDYCATwww

Actores similares

apt-toddycatactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1