Threat actor · G0112

Windshift

Bahamut

UnattributedNo public state or group attribution on record

Windshift is a threat group that has been active since at least 2017, targeting specific individuals for surveillance in government departments and critical infrastructure across the Middle East.

MITRE ATT&CK Techniques

T1027 T1033 T1036 T1036.001 T1047 T1057 T1059.005 T1071.001 T1082 T1105 T1189 T1204.001 T1204.002 T1518 T1518.001 T1547.001 T1566.001 T1566.002 T1566.003

Associated Malware

WindTail

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.