Threat Actor
STA2
- First Reported
- Oct 21, 2026
- Latest Reported
- Oct 21, 2026
Reported Context (1)
- Citizen Lab tracking designation for a surveillance cluster combining SS7 reconnaissance, a SIMjacker-style binary SMS exploit, and Diameter location queries. Historical indicators overlapped with Fink Telecom Services, but the report did not directly attribute the activity to a specific organization. Citizen Lab Uncovers Global Telecom Surveillance Using SS7, Diameter and SIMjacker
Threat Actors (2)
MITRE ATT&CK (1)
Vendors (8)
Products (1)
Industries (1)
Countries (13)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.