Digital.Nhs.Uk Emerging Cyber Threats from APT Groups in 2026
Article Content
Browse articles 
Multiple advanced persistent threat (APT) groups are utilizing new malware tools to target organizations. Notable threats include Bateleur and Epic from the Carbanak and Turla groups, respectively, as well as Crimson and Parallax from APT36. These tools employ various techniques, including JavaScript backdoors and remote access trojans, to facilitate unauthorized access and control over compromised systems.
Ask AI about this cluster
Answers cite the sources they use
Updated 217d ago How this analysis works
Timeline
2017-01-01
Bateleur backdoor first observed
2017-01-01
Epic backdoor created by Turla group
2018-02-01
Gorgon Group conducts targeted attacks
2019-12-01
Parallax RAT first observed
Date unknown
Crimson RAT developed by APT36
More articles in this cluster (9)
Following this threat?
Track APT36 and Bateleur in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
APT36 Launches Operation RapidRust with New Rust Malware Tools In August 2026, the Pakistan-nexus threat actor APT36 initiated Operation RapidRust, targeting government and defense organizations in India and Afghanistan. The campaign introduced several new Rust-based malware tools, including the RUSTYSHADE backdoor and RUSTYMOVE propagation tool. APT36 also deployed file-stealing… 
Critical Zero-Day Exploit in BeyondTrust Remote Support Disclosed BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE. The flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring credentials or user…