Windshift — APT Profile
Windshift is a threat group that has been active since at least 2017, targeting specific individuals for surveillance in government departments and critical infrastructure across the Middle East.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Also tracked as
Bahamut, Windy Phoenix
Tools & malware
- WindTail Backdoor
Vendor research
- TRAILS OF WINDSHIFT SANS
- Middle East Cyber-Espionage analyzing WindShift's implant: OSX.WindTail (part 1) objective-see
- Middle East Cyber-Espionage analyzing WindShift's implant: OSX.WindTail (part 2) objective-see