Waterbug — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
June 11, 2026
Last Seen
July 14, 2026

Waterbug is a apt_group tracked across 4 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed June 11, 2026; most recent activity July 14, 2026.

Related Threat Clusters

  • Gamaredon APT Escalates Cyber Operations Against Ukraine in 2025

    The Gamaredon group, a Russian-aligned APT, has significantly upgraded its cyber capabilities in 2025, focusing on spear-phishing campaigns against Ukrainian targets. ESET Research reports that Gamaredon conducted 35…

    7 articles · Updated June 25, 2026
  • EU Sanctions Russia Over Ongoing Cyber Espionage Campaign

    The European Union has condemned and sanctioned Russia for a prolonged cyber espionage campaign targeting its member states. The campaign, orchestrated by the 16th Centre of the FSB, has involved infiltrating government…

    165 articles · Updated July 13, 2026
  • OceanLotus Shifts Focus to Domestic Espionage with SPECTRALVIPER Attacks

    From mid-2024 to early 2026, the Vietnam-aligned APT group OceanLotus has intensified its focus on domestic espionage, utilizing the SPECTRALVIPER backdoor in two major campaigns. The first campaign targeted a…

    17 articles · Updated June 11, 2026
  • France Attributes Cyber Espionage to Russian FSB's Turla Group

    On July 13, 2026, France officially attributed a series of cyber intrusions targeting its government and defense sectors to the Turla intrusion set, linked to Russia's FSB 16th Center. The attacks, ongoing since the…

    3 articles · Updated July 13, 2026

Recent Intelligence Reports

  • Venomous Bear, — www.crowdstrike.com · July 14, 2026
  • Europe strikes out against Russia’s Turla over espionage, ‘destructive attacks’ — Cyberscoop · July 13, 2026
  • SPECIAL Informat. ro / What is Center 16 of the FSB and Turla, one of the oldest and most ... — Informat.Ro · July 13, 2026
  • France names FSB 16th Center for cyber intrusion – Investigations with Impact — Alleyesonwagner · July 13, 2026
  • Russian APT 'Gamaredon' Upgrades Its Arsenal, Requiring New Defenses — Darkreading · June 25, 2026
  • Oceanlotus Blossoms Mass Digital Surveillance And Exploitation Of Asean Nations The Media Human Rights And Civil Society — www.volexity.com · June 11, 2026

CVSS v3.1 Breakdown