Operation Wocao — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
May 13, 2026
Last Seen
June 3, 2026

Related Threat Clusters

  • FamousSparrow APT Expands Targeting to Azerbaijani Energy Sector

    FamousSparrow, a China-aligned APT group, launched a multi-wave cyberespionage campaign against an Azerbaijani oil and gas company from late December 2025 to February 2026. The attackers employed an evolved DLL…

    10 articles · Updated May 13, 2026
  • Exploitation of Remote Services in Cyber Attacks

    Adversaries are increasingly leveraging external remote services like VPNs and Citrix to gain unauthorized access to networks. These attacks often involve using valid accounts obtained through credential harvesting or…

    2 articles · Updated June 3, 2026

Recent Intelligence Reports

  • External Remote Services — attack.mitre.org · June 3, 2026
  • T1505.003 Web Shell — attack.mitre.org · May 13, 2026

CVSS v3.1 Breakdown