Threat actor

Tomiris

In 3 briefs, most recently 2 December 2025. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. Coupang breach exposing 33.7M customers, CodeRED alert platform shut down by Inc ransomware, and SmartTube app compromised via stolen signing keys.
  2. Asahi breach hitting up to 1.9M people, actively exploited OpenPLC ScadaBR XSS flaw added to CISA KEV, and Tomiris's stealthier C2 implants.
  3. OpenAI API customer data exposed via Mixpanel breach, Asahi ransomware hits 2M people, and CodeRED alert system outage; plus Tomiris and Bloody Wolf activity.