DevilsTongue Spyware Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
December 2, 2025
Last Seen
December 2, 2025

DevilsTongue Spyware is a malware family tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed December 2, 2025; most recent activity December 2, 2025.

Overview

DevilsTongue Spyware is a Windows-targeting spyware family recently documented in December 2025, observed in campaigns across multiple countries. It appears to focus on covert surveillance and data collection from Windows endpoints, signaling a notable expansion of spyware activity affecting diverse regions. The report underscores the rising risk to Windows users from organized spyware operations.

Related Threat Clusters

  • DevilsTongue Spyware Targets Windows Users Globally

    DevilsTongue spyware, developed by Candiru, is actively targeting Windows users in multiple countries. The malware exploits vulnerabilities to infiltrate systems and gather sensitive information. Affected regions…

    3 articles · Updated December 2, 2025

Recent Intelligence Reports

  • DevilsTongue Spyware Targets Windows Users Across Multiple Countries — Gbhackers · December 2, 2025

Related Entities

CVSS v3.1 Breakdown