Poseidon

Malware

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 11, 2025

Last Seen

June 10, 2026

API

Poseidon is a malware family referenced in relation to a North Korea–linked hacking operation that uses legitimate advertising networks to distribute its payloads.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (3)

Related Entities

Kimsuky Konni Malware Poseidon-Attack Google Naver North Korea CWE-200 - Exposure of Sensitive Information Atomic Stealer AMOS MacSync Odyssey

Poseidon

Overview

Recent Events

Profile

Capabilities

Delivery Methods

Used By

Targeted Platforms

Target Regions

Common TTPs

Associated Campaigns

Relationships

Related Clusters (3)

Weaponized DMG Files Target macOS Users with Infostealer Malware

N. Korea-linked Konni Group Uses Naver, Google Ads for Malware Distribution

Malwarebytes Enhances Mac Scan Engine for Improved Threat Detection

Related Articles (5)

Deceptive Installers: How Fake Apps Target macOS

N. Korea-linked hacking group exploits Naver, Google ads to spread malware: report

Malwarebytes Launches a New Enhanced Mac Scan Engine for Threat Protection

Malwarebytes Launches New Enhanced Mac Scan Engine for Smarter, Deeper macOS ...

Malwarebytes Launches New Enhanced Mac Scan Engine for Smarter, Deeper macOS ...

Related Entities