Threat Actor
SixLittleMonkeys
- First Reported
- May 21, 2026
- Latest Reported
- May 21, 2026
Reported Context (2)
- The article says use of Mikroceen was attributed to SixLittleMonkeys, which it describes as sharing tactical overlaps with Webworm. Researchers Link Showboat Linux Malware to Middle East Telecom Campaign
- Described as a China-nexus cluster that overlaps with Webworm; reported to deploy Gh0st RAT and Mikroceen against entities in Central Asia, Russia, Belarus, and Mongolia. Webworm Adds EchoCreep and GraphWorm Backdoors Using Discord and Microsoft Graph API
CVE (1)
Malware (15)
People (3)
Threat Actors (6)
MITRE ATT&CK (9)
Vendors (1)
Products (6)
Tools (8)
Industries (5)
Countries (15)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.