Tinyshell Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
February 10, 2026
Last Seen
March 27, 2026

Tinyshell is a malware family tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed February 10, 2026; most recent activity March 27, 2026.

Related Threat Clusters

  • Red Menshen APT Uses BPFdoor for Long-Term Espionage in Telecom Networks

    A China-linked threat actor known as Red Menshen has been conducting a long-term espionage campaign targeting global telecommunications networks using a stealthy Linux kernel backdoor called BPFdoor. This malware…

    16 articles · Updated March 26, 2026
  • Critical Vulnerability in Juniper PTX Routers Allows Remote Code Execution

    A critical vulnerability identified as CVE-2026-21902 affects the Junos OS Evolved on PTX Series routers, enabling unauthenticated attackers to execute code with root privileges. These routers are widely used by…

    15 articles · Updated February 26, 2026
  • Singapore Telcos Targeted by UNC3886 Cyberattack

    In July 2025, an advanced persistent threat actor known as UNC3886 targeted Singapore's four telecommunications companies, compromising critical infrastructure. The attack was detected by the Infocomm Media Development…

    78 articles · Updated February 9, 2026

Recent Intelligence Reports

  • China-linked hackers plant stealth malware deep in global telecom networks: Report — Thehansindia · March 27, 2026
  • China-linked hackers plant stealth malware deep in global telecom networks: Report — Lokmattimes · March 27, 2026
  • Critical Juniper Networks PTX flaw allows full router takeover — Bleepingcomputer · February 26, 2026
  • Singapore confirms UNC3886 espionage campaign against telecom sector, prompts major ... — Industrialcyber.Co · February 10, 2026

CVSS v3.1 Breakdown