Threat Actor
GALLIUM
- First Reported
- Aug 10, 2026
- Latest Reported
- Aug 10, 2026
Reported Context (1)
- Microsoft reportedly observed this actor installing a SoftEther VPN server on a target network to access its internal network. Larva-26010 Targets Korean Web Servers to Install SoftEther VPN
Threat Actors (3)
MITRE ATT&CK (10)
Products (4)
Tools (6)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.