Leviathan — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
November 25, 2025
Last Seen
July 23, 2026

Leviathan is a apt_group tracked across 6 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed November 25, 2025; most recent activity July 23, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • 001 — attack.mitre.org · July 23, 2026
  • T1203 · Exploitation for Client Execution — attack.mitre.org · June 8, 2026
  • External Remote Services — attack.mitre.org · June 3, 2026
  • T1505.003 Web Shell — attack.mitre.org · May 13, 2026
  • Malaysia's digital growth and geopolitics widen cyber attack surface, raising critical ... — Industrialcyber.Co · April 7, 2026
  • CYFIRMA INDUSTRY REPORT : TELECOMMUNICATIONS & MEDIA — Cyfirma · November 25, 2025

CVSS v3.1 Breakdown