Olympic Destroyer Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
May 4, 2026
Last Seen
July 23, 2026

Olympic Destroyer is a malware family tracked by ThreatCluster, appearing in 6 threat clusters built from 5 intelligence report mentions.

Olympic Destroyer is a malware family tracked across 6 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed May 4, 2026; most recent activity July 23, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • T1485 — attack.mitre.org · July 23, 2026
  • G0034 — attack.mitre.org · June 24, 2026
  • ESET APT Reports — www.globenewswire.com · May 28, 2026
  • ESET Threat Intelligence — www.eset.com · May 7, 2026
  • Canada/Mexico/US: World Cup 2026 Cyber Risks Extend Beyond Stadium Systems — Crisis24 · May 4, 2026

Frequently asked questions

What is Olympic Destroyer?

Olympic Destroyer is a malware family tracked by ThreatCluster, appearing in 6 threat clusters built from 5 intelligence report mentions.

Is Olympic Destroyer still active?

The most recent intelligence report mentioning Olympic Destroyer on ThreatCluster is dated July 23, 2026. Activity was first observed May 4, 2026, giving a tracked span from then to July 23, 2026.

What is Olympic Destroyer associated with?

Across ThreatCluster reporting, Olympic Destroyer most frequently co-occurs with Apt28, Apt29, Apt36, Apt38, Blue Callisto, among 12 tracked related entities.

What are the latest developments involving Olympic Destroyer?

The most significant recent cluster is “MuddyWater Targets U.S. Entities Amid Geopolitical Tensions” (16 articles · Updated July 22, 2026). Olympic Destroyer appears across 6 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Olympic Destroyer?

Olympic Destroyer appears in 5 intelligence report mentions across 6 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown