Securityboulevard

APT Groups BITTER and ArcaneDoor Target Enterprises with Cyber Attacks

First seen 31 Dec 2025, 15:27 UTC • •34.9

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

In November 2025, the Indian APT group BITTER launched a cyber attack targeting enterprises and carriers. Earlier, in September 2025, the APT group ArcaneDoor exploited a zero-day vulnerability in the Cisco Adaptive Firewall to conduct attacks, highlighting ongoing threats from advanced persistent threats (APTs).

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 241d ago How this analysis works

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Threat Actor (2)

ArcaneDoor
Bitter

Technique (1)

Zero-day Exploit

Affected Platform (1)

Cisco Adaptive Firewall

Relationships

ArcaneDoor uses Zero-day Exploit
Bitter uses Zero-day Exploit
ArcaneDoor related to Cisco Adaptive Firewall

Following this threat?

Track ArcaneDoor in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

APT Groups BITTER and ArcaneDoor Target Enterprises with Cyber Attacks

Article Content

More articles in this cluster (2)

Threat Graph

Following this threat?

Extracted Entities (4)

APT Groups (2)

Attack Types (1)

Platforms (1)