Threat Actor
HelloNet
- First Reported
- Jul 20, 2026
- Latest Reported
- Jul 20, 2026
Reported Context (1)
- Name used for the threat actor or campaign abusing the ViPNet update mechanism to target Russian organizations. Kaspersky tentatively links the activity to an unidentified Chinese-speaking APT group, but rates that attribution as low confidence and does not rule out a false flag. HelloNet Abuses ViPNet Updates to Target Russian Organizations
Malware (5)
MITRE ATT&CK (4)
Vendors (1)
Products (1)
Industries (5)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.