WindShift is a nation-state cyber espionage group that first emerged in early 2018, attributed with high confidence to a Middle Eastern authority. The group's primary motivation is intelligence gathering, and they distinguish themselves through highly targeted attacks on government sectors and critical infrastructure. They employ custom malware, such as OSX.WindTail for macOS and APK.Bahamut for Android, delivered via spear-phishing campaigns. WindShift is notable for its focused targeting of specific, often high-profile individuals within defense and government entities across the Middle East and South Asia. The group is also known by the alias Windy Phoenix.

Aliases del actor

Windy Phoenixaunque no se han identificado sistemas específicos afectadosURPAGEEHDEVELWINDSHIFTThe White CompanyG0112InPage zero-dayMalicious MDMla defensa de infraestructuras críticas

Actores similares

The White Companythreat-actor · 1themx0ndayactor · 1white-companyactor · 1whiteelephantactor · 1Leviathanthreat-actor · 1Whiteflythreat-actor · 1Dropping Elephantapt · 0Mysterious Elephantapt · 0Fishing Elephantapt · 0Earth Krahangapt · 0