Threat actor · G1022

ToddyCat

UnattributedNo public state or group attribution on record

ToddyCat is a sophisticated threat group that has been active since at least 2020 using custom loaders and malware in multi-stage infection chains against government and military targets across Europe and Asia.

MITRE ATT&CK Techniques

T1005 T1018 T1021.002 T1036.005 T1047 T1049 T1053.005 T1057 T1059.001 T1059.003 T1069.002 T1074.002 T1078.002 T1083 T1087.002 T1095 T1106 T1190 T1518.001 T1560.001 T1564.003 T1566.003 T1567.002 T1680 T1686

Associated Malware

China ChopperCobalt StrikeLoFiSeNetNinjaPcexterPingSamurainetstat

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.