Dancing Salome

MISP
Type:
Unknown
Country:
Unknown
First seen:
Unknown
Details:

Dancing Salome is the Kaspersky codename for an APT actor with a primary focus on ministries of foreign affairs, think tanks, and Ukraine. What makes Dancing Salome interesting and relevant is the attacker’s penchant for leveraging HackingTeam RCS implants compiled after the public breach.

Metadata
ID: 89
Created: 13/01/2026 17:48
Updated: 07/03/2026 04:00