Threat actor · G0112

Windshift

Also known as Bahamut.

Windshift is a threat group that has been active since at least 2017, targeting specific individuals for surveillance in government departments and critical infrastructure across the Middle East.

ATT&CK techniques

19 mapped

T1027 T1033 T1036 T1036.001 T1047 T1057 T1059.005 T1071.001 T1082 T1105 T1189 T1204.001 T1204.002 T1518 T1518.001 T1547.001 T1566.001 T1566.002 T1566.003