Webworm is a apt_group tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed May 20, 2026; most recent activity May 27, 2026.
The China-aligned APT group Webworm has shifted its focus from Asia to Europe, targeting government organizations in Belgium, Italy, Poland, Serbia, and Spain during 2025. ESET researchers identified new backdoors,…
GraphWorm, a backdoor associated with the China-aligned APT group Webworm, has emerged as a significant threat in 2025, utilizing Microsoft OneDrive for command-and-control operations. This malware marks a shift in…
On May 27, 2026, NATO announced strategic, non-commercial cybersecurity partnerships with Microsoft, Palo Alto Networks, and ESET at the CyCon conference in Tallinn, Estonia. These partnerships aim to enhance collective…