Tomiris — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 29, 2025
Last Seen
November 29, 2025

Tomiris is a apt_group tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed November 29, 2025; most recent activity November 29, 2025.

Overview

Tomiris is an Advanced Persistent Threat (APT) group known for conducting sustained cyber campaigns. The latest report indicates it has upgraded its tactics and tooling to support worldwide cyber operations, signaling greater sophistication and a broader global reach. This underscores Tomiris' significance as an example of APT groups expanding cross-border capabilities and modernizing their toolsets.

Related Threat Clusters

  • Tomiris Hackers Enhance Tools for Global Cyber Attacks

    The cyber-espionage group known as 'Tomiris' has initiated a new series of attacks targeting government and diplomatic entities across the globe. This escalation includes the deployment of upgraded tactics and tools…

    3 articles · Updated November 29, 2025

Recent Intelligence Reports

  • Tomiris Hackers Upgrade Tactics and Tools for Worldwide Cyber Operations — Cyberpress · November 29, 2025

Related Entities

CVSS v3.1 Breakdown