Manager Red-Teamer Behörden Network AD & Identity

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Securelist·22. Mai 2026, 09:12

The experienced Cloud Atlas group remains active, continuing to target government sectors and diplomatic entities in Russia and Belarus, employing both new and established techniques to maintain persistence in compromised systems.

MITRE ATT&CK Kill Chain (14 Techniken)

Reconnaissance

T1589.001

Credentials

T1592.002

Software

Resource Development

Domains

Server

Domains

Server

Malware

Malware

Initial Access

T1566

Phishing

Execution

T1053.005

Scheduled Task

T1059.001

PowerShell

T1059.006

Python

Credential Access

T1558.003

Kerberoasting

Command & Control

T1090

Proxy

Themen

APT reportsMalware TechnologiesMicrosoft WindowsTargeted attacksMalware DescriptionsPhishingAPTBackdoorPowerShellSSH

Vollständigen Artikel lesen bei Securelist

MITRE ATT&CK Kill Chain (14 Techniken)

Verwandte Artikel