Threat actor · G1022

ToddyCat

ToddyCat is a sophisticated threat group that has been active since at least 2020 using custom loaders and malware in multi-stage infection chains against government and military targets across Europe and Asia.

ATT&CK techniques

25 mapped

T1005 T1018 T1021.002 T1036.005 T1047 T1049 T1053.005 T1057 T1059.001 T1059.003 T1069.002 T1074.002 T1078.002 T1083 T1087.002 T1095 T1106 T1190 T1518.001 T1560.001 T1564.003 T1566.003 T1567.002 T1680 T1686