Phantom Taurus — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
January 15, 2026
Last Seen
January 15, 2026

Phantom Taurus is an advanced persistent threat (APT) group identified by threat intelligence communities as a state-aligned actor conducting long-running espionage campaigns.

Overview

Phantom Taurus is an advanced persistent threat (APT) group identified by threat intelligence communities as a state-aligned actor conducting long-running espionage campaigns. It typically employs customized malware, credential access techniques, and targeted phishing to maintain footholds in high-value networks, underscoring the ongoing risk to government, defense, and critical infrastructure sectors. The group's significance lies in its potential to influence geopolitical dynamics and cyber supply chains through covert access and information theft.

Related Threat Clusters

Recent Intelligence Reports

  • China blacklists VMware, Palo Alto Networks software over national security fears: report — Sdxcentral · January 15, 2026

CVSS v3.1 Breakdown