Malware
SPAWN
- First Reported
- May 28, 2026
- Latest Reported
- May 28, 2026
Reported Context (1)
- On VirusTotal we found PhiliKit, a new implant that we assess to be part of UNC5221’s SPAWN toolset targeting Ivanti VPN appliances, while our tracking of NegativeGlimmer revealed the group compromising governmental ESET Report Details APT Campaigns and Threat Trends From October 2025 to March 2026
Malware (6)
Threat Actors (15)
Vendors (2)
Products (2)
Industries (11)
Countries (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.