Threat Actor
StingyBasilisk
- First Reported
- Oct 29, 2026
- Latest Reported
- Oct 29, 2026
Reported Context (1)
- PT ESC named the group after discovering its activity in early 2026 and reported that it had been active since at least April 2022. The group used custom malware, persistence mechanisms, lateral movement, and named-pipe command and control. The article says it could not reliably attribute the activity to a previously known APT group. StingyBasilisk Uses COM Hijacking and Named-Pipe C2 to Hide Windows Malware
Malware (5)
MITRE ATT&CK (12)
Products (1)
Tools (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.