Gbhackers
Vortex Werewolf Cyber Espionage Targets Russian Organizations with Remote Access Tools
First seen 9 Feb 2026, 16:04 UTC
•
•86% similarity
•32.7
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Vortex Werewolf cyber espionage group has been actively targeting Russian government and defense organizations since at least December 2025. This group utilizes social engineering and legitimate software utilities to establish covert remote access via Tor-enabled protocols such as RDP, SMB, SFTP, and SSH.
ThreatCluster AI
Timeline
2025-12-01
Vortex Werewolf begins targeting Russian organizations
2026-02-09
GBHackers and Cybersecuritynews report on Vortex Werewolf