Tag: driveswitch

1 Attack Reports | 0 Vulnerabilities

Attack reports

Targets high value telecommunications infrastructure in South Asia

UAT-7290, a sophisticated threat actor active since 2022, is targeting critical infrastructure entities in South Asia, particularly telecommunications providers. The group's arsenal includes malware families like RushDrop, DriveSwitch, SilentRaid, and Bulbature. UAT-7290 conducts extensive reconnai…
espionage
shadowpad
telecommunications
bulbature
china-nexus
2026-01-08
driveswitch
redleaves
rushdrop
silentraid
Published: January 8, 2026
Downloadable IOCs: 3
Click here to see more Attack Reports