Mr. Bean — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
July 25, 2026
Last Seen
July 25, 2026

Mr. Bean is a apt_group tracked across 2 threat clusters and 1 intelligence report mention on ThreatCluster. First observed July 25, 2026; most recent activity July 25, 2026.

Related Threat Clusters

  • Ransomware Fuels Surge in Global Cyberattacks

    As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…

    1551 articles · Updated February 12, 2026
  • Phishing Landscape Shift Post Tycoon2FA Takedown

    The takedown of the Tycoon2FA phishing-as-a-service platform has dramatically reduced traditional phishing techniques, with a reported 92% drop in phishing volume linked to the platform. Microsoft noted that phishing…

    2 articles · Updated July 24, 2026

Recent Intelligence Reports

  • LevelBlue found that phishing started 65% of intrusions — www.levelblue.com · July 25, 2026

CVSS v3.1 Breakdown