REF5961

MISP
Type:
Unknown
Country:
Unknown
First seen:
Unknown
Details:

Elastic's security team has published a report on REF5961, a cyber-espionage group they found on the network of a Foreign Affairs Ministry from a member of the Association of Southeast Asian Nations (ASEAN). Elastic says it found the group's tools next to the malware of another cyber-espionage group it tracks as REF2924. REF5961's arsenal includes malware such as EAGERBEE, RUDEBIRD, and DOWNTOWN.

Metadata
ID: 463
Created: 13/01/2026 17:48
Updated: 08/03/2026 04:00