Related Threat Clusters

Airstalk Malware Exploits MDM Tools in Supply Chain Attacks
A new malware variant named Airstalk has been discovered, linked to suspected nation-state hackers. This malware targets mobile device management tools, specifically leveraging the AirWatch API to create covert…

1 article · Updated November 3, 2025
Airstalk Malware Exploits AirWatch MDM for Covert C2 Communication
Airstalk malware has been identified exploiting the AirWatch Mobile Device Management (MDM) platform to establish covert command and control (C2) communication. This malware leverages vulnerabilities in VMware's…

3 articles · Updated November 6, 2025
Airstalk Malware Exploits MDM Tools in Supply Chain Attacks
Palo Alto Networks’ Unit 42 has identified a new malware campaign named Airstalk, linked to a suspected nation-state actor. This malware targets mobile device management tools, specifically leveraging the AirWatch API…

2 articles · Updated November 3, 2025
Airstalk Malware Exploits AirWatch MDM for Covert C2 Communication
Airstalk malware has been identified exploiting vulnerabilities in VMware's AirWatch Mobile Device Management (MDM) platform to establish covert command and control (C2) communication. Organizations utilizing this MDM…

4 articles · Updated November 6, 2025

Recent Intelligence Reports

Airstalk Malware Leverages AirWatch API MDM Platform to Establish Covert C2 Communication — Cybersecuritynews · November 6, 2025
Warning issued of new nation state malware targeting browsers — Computing · November 3, 2025

Malware Supply Chain Attack Business Process Outsourcing Airstalk T1059.001 - PowerShell AirWatch Island Browser Microsoft Edge Windows Google Chrome PowerShell Workspace ONE Unified Endpoint Management