Suspected APT43 infrastructure mimicking German and U.S. defense-related entities (THINWAVE)

Date (as written): 2026-02-10 (datePublished)
Year: 2026
Country: German and U.S.
Actors (as written): APT43 (suspected)
Actor pages: APT43
Tags (as written): defense

Source entries (1)

Google Threat Intelligence Group (GTIG) / Google Cloud

Suspected APT43 infrastructure mimicking German and U.S. defense-related entities (THINWAVE) · 2026-02-10 (datePublished)

GTIG identified suspected APT43 infrastructure mimicking German and U.S. defense-related entities, including a credential harvesting page and job-themed lure content used to deploy the THINWAVE backdoor.

https://cloud.google.com/blog/topics/threat-intelligence/threats-to-defense-industrial-base

Suggest a correction on GitHub