Torch — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
July 8, 2026
Last Seen
August 2, 2026

Torch is a threat campaign tracked by ThreatCluster, appearing in 3 threat clusters built from 6 intelligence report mentions.

Torch is a threat campaign tracked across 3 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed July 8, 2026; most recent activity August 2, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • CVE-2026-68771 — ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization OSV Advisories — GIT / 19h CVE: CVE-2026-68771 ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a mal — osv.dev · August 2, 2026
  • 003 — attack.mitre.org · July 23, 2026
  • Police From Seven Countries Have Arrested 28 People Suspected of Child Sexual Abuse. Raids Were Also Carried Out in the Czech Republic — www.novinky.cz · July 9, 2026
  • Police From Seven Countries Have Arrested 28 People Suspected of Child Sexual Abuse. Raids Were Also Carried Out in the Czech Republic — www.novinky.cz · July 9, 2026
  • Police From Seven Countries Have Arrested 28 People Suspected of Child Sexual Abuse. Raids Were Also Carried Out in the Czech Republic — www.novinky.cz · July 8, 2026
  • Police From Seven Countries Have Arrested 28 People Suspected of Child Sexual Abuse. Raids Were Also Carried Out in the Czech Republic — www.novinky.cz · July 8, 2026

Frequently asked questions

What is Torch?

Torch is a threat campaign tracked by ThreatCluster, appearing in 3 threat clusters built from 6 intelligence report mentions.

Is Torch still active?

The most recent intelligence report mentioning Torch on ThreatCluster is dated August 2, 2026. Activity was first observed July 8, 2026, giving a tracked span from then to August 2, 2026.

What is Torch associated with?

Across ThreatCluster reporting, Torch most frequently co-occurs with Apt29, APT3, Apt33, Apt37, APT41, among 12 tracked related entities.

What are the latest developments involving Torch?

The most significant recent cluster is “MuddyWater Targets U.S. Entities Amid Geopolitical Tensions” (16 articles · Updated July 22, 2026). Torch appears across 3 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Torch?

Torch appears in 6 intelligence report mentions across 3 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown