Search all coverage

Threat actor

ToddyCat

Tracked by CyberSIXT since Jun 30, 2026 · last activity Jul 3, 2026

Linked incidents

outage closed 3 articles

ToddyCat APT uses Umbrij malware to hijack corporate Gmail via OAuth

Coverage timeline

ToddyCat APT hijacks corporate Gmail via Umbrij OAuth theft
securityonline.info · Jul 3, 2026
Umbrij Malware Hijacks Gmail via OAuth, Raising Security Fears
thehackernews.com · Jul 2, 2026
Kaspersky Warns of ToddyCat Gmail Hack via Shadow Token Technique
databreaches.net · Jun 30, 2026
ToddyCat APT’s Umbrij Tool Steals Corporate Gmail via Google API
securelist.com · Jun 30, 2026