Skip to content
Airstalk Malware Exploits MDM Tools in Supply Chain Attacks

Airstalk Malware Exploits MDM Tools in Supply Chain Attacks

First seen 4 Nov 2025, 11:10 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A new malware variant named Airstalk has been discovered, linked to suspected nation-state hackers. This malware targets mobile device management tools, specifically leveraging the AirWatch API to create covert command-and-control channels. The campaign is believed to be part of a broader supply chain attack, affecting trusted enterprise environments.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

More articles in this cluster (1)

Following this threat?

Track Airstalk in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed