Threat Actor
Raspberry Typhoon
- First Reported
- Feb 19, 2026
- Latest Reported
- Feb 20, 2026
Reported Context (2)
- The article lists Raspberry Typhoon as a tracking name for Lotus Blossom, the group it links to long-term espionage activity. Lotus Blossom Profile Traces Shift From Phishing to Supply-Chain Espionage
- The article explicitly identifies Raspberry Typhoon as an alias of Lotus Blossom, which it attributes with the Notepad++ update infrastructure compromise and Chrysalis delivery. Elastic Shows Automated Triage Workflow for Chrysalis Backdoor Alerts
CVE (10)
Malware (5)
Threat Actors (4)
MITRE ATT&CK (19)
Vendors (4)
Products (13)
Tools (7)
Industries (8)
Countries (10)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
