Sphinx Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
July 28, 2026
Last Seen
July 28, 2026

Sphinx is a malware family tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.

Sphinx is a malware family tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed July 28, 2026; most recent activity July 28, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • >> Read this brief on krypteiasec.com — krypteiasec.com · July 28, 2026
  • Daily Threat Brief: July 27, 2026 — Buttondown · July 28, 2026

Frequently asked questions

What is Sphinx?

Sphinx is a malware family tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.

Is Sphinx still active?

The most recent intelligence report mentioning Sphinx on ThreatCluster is dated July 28, 2026.

What is Sphinx associated with?

Across ThreatCluster reporting, Sphinx most frequently co-occurs with Authentication Bypass, Botnet, Command Injection, Data Breach, Elevation Of Privilege, among 12 tracked related entities.

What are the latest developments involving Sphinx?

The most significant recent cluster is “Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems” (2 articles · Updated July 28, 2026). Sphinx appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on Sphinx?

Sphinx appears in 2 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown