Threat Actor
CL-STA-1048
- First Reported
- Mar 27, 2026
- Latest Reported
- Apr 3, 2026
Reported Context (2)
- This activity cluster deployed EggStremeFuel, Masol RAT, Gorem RAT, and TrackBak in the campaign. Unit 42 Details Three-Cluster Cyberespionage Campaign Targeting Southeast Asian Government
- Unit 42's tracked malicious activity cluster deployed EggStremeFuel, Masol RAT, EggStreme loader/Gorem RAT, and TrackBak. Its links to publicly reported groups remain uncertain. Unit 42 Details Three Cyberespionage Clusters Targeting a Southeast Asian Government
Malware (14)
Threat Actors (7)
MITRE ATT&CK (11)
Vendors (1)
Products (8)
Tools (2)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
