Threat Actor
Red Lich
- First Reported
- Apr 4, 2026
- Latest Reported
- Apr 4, 2026
Reported Context (1)
- The article describes Red Lich as an activity cluster with technical or activity overlap with TA416; it does not state that Red Lich conducted the reported campaigns. TA416 Uses Evolving PlugX Delivery Chains to Target European Governments
Malware (4)
People (2)
Threat Actors (10)
MITRE ATT&CK (7)
Vendors (3)
Products (6)
Industries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.