Related Threat Clusters

Cloud Atlas APT Group Exploits CVE-2018-0802 and Modifies termsrv.dll for RDP Access
The Cloud Atlas APT group has been observed employing a sophisticated cyber espionage campaign targeting government and commercial entities in Russia and Belarus. This campaign, active since 2025 and continuing into…

4 articles · Updated May 25, 2026
Cloud Atlas APT Targets Russia and Belarus with New Tools and Techniques
Cloud Atlas, an advanced persistent threat group, has intensified its cyberespionage activities against government and commercial entities in Russia and Belarus since late 2025. The group employs phishing emails…

2 articles · Updated May 23, 2026

Recent Intelligence Reports

Cloud Atlas said in a report shared with GBhackers — securelist.ru · May 25, 2026
APT Group Patches termsrv.dll to Enable Multiple RDP Sessions — Gbhackers · May 25, 2026
Cloud Atlas APT Targets Russia and Belarus with PowerCloud Tool — Technadu · May 23, 2026
Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload — Securelist · May 22, 2026