Supershell - Tool

Threat entity extracted from intelligence sources

Frequency
8
occurrences
First Seen
December 10, 2025
Last Seen
February 11, 2026

Supershell is a tool tracked by ThreatCluster, appearing in 4 threat clusters built from 8 intelligence report mentions.

Supershell is a tool tracked across 4 threat clusters and 8 intelligence report mentions on ThreatCluster. First observed December 10, 2025; most recent activity February 11, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • New threat actor, UAT-9921, leverages VoidLink framework in campaigns — Blog.Talosintelligence · February 11, 2026
  • CISA Flags Actively Exploited Gogs Vulnerability With No Patch — Infosecurity-Magazine · January 13, 2026
  • New China — Bleepingcomputer · January 8, 2026
  • Attackers Exploited Gogs Zero — Darkreading · December 11, 2025
  • Hackers exploit unpatched Gogs zero — Bleepingcomputer · December 11, 2025
  • 700+ self-hosted Gits battered in 0-day attacks with no fix imminent — Theregister · December 10, 2025
  • 700+ self-hosted Gits battered in 0 — Theregister · December 10, 2025
  • Gogs Zero-Day RCE (CVE-2025-8110) Actively Exploited — Wiz · December 10, 2025

Frequently asked questions

What is Supershell?

Supershell is a tool tracked by ThreatCluster, appearing in 4 threat clusters built from 8 intelligence report mentions.

Is Supershell still active?

The most recent intelligence report mentioning Supershell on ThreatCluster is dated February 11, 2026. Activity was first observed December 10, 2025, giving a tracked span from then to February 11, 2026.

What is Supershell associated with?

Across ThreatCluster reporting, Supershell most frequently co-occurs with Malware, Zero-day Exploit, Gogs, China, Germany, among 12 tracked related entities.

What are the latest developments involving Supershell?

The most significant recent cluster is “China-linked Cyber Group Expands Targeting to Southeastern Europe” (1 article · Updated January 8, 2026). Supershell appears across 4 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Supershell?

Supershell appears in 8 intelligence report mentions across 4 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown