APT Explorer

All actors

RedStinger

Also reported as Bad Magic and CloudWizard.

Reports
10
Last reported
Known CVEs
7
ID
redstinger
Sources
MISPETDAMalpedia
Merge evidence
4 alias matches

Reports per quarter

Dated reports, 2023 Q1 to 2026 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. APT and financial attacks on industrial organizations in H1 2023 | Kaspersky ICS CERT EN

    date ORKL added it ORKL

    Archived copy on ORKL Details

  2. CloudSorcerer – A new APT targeting Russian government entities

    Malpedia library date ORKL

    Archived copy on ORKL Details

  3. deep analysis of Xiangoop Loader and EntryShell payload

    Malpedia library date ORKL

    Archived copy on ORKL Details

  4. IT threat evolution in Q2 2023

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. Picus Cyber Threat Intelligence Report May 2023: Top 10 MITRE ATT&CK Techniques

    Malpedia library date ORKL

    Archived copy on ORKL Details

  6. CloudWizard APT: the bad magic story goes on

    Malpedia library date Kaspersky ORKLCCS '25 data

    Archived copy on ORKL Details

  7. Uncovering RedStinger – Undetected APT cyber operations in Eastern Europe since 2020

    Malpedia library date ORKL

    Archived copy on ORKL Details

  8. Bad magic: new APT found in the area of Russo-Ukrainian conflict

    Malpedia library date ORKL

    Archived copy on ORKL Details

  9. Bad magic- new APT found in the area of Russo-Ukrainian conflict

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  10. Bad magic: new APT found in the area of Russo-Ukrainian conflict

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.