Threat actor
REF7707
Tracked by CyberSIXT since Aug 13, 2026 · last activity Aug 20, 2026
Coverage timeline
-
Jewelbug APT uses fake updates to spy on governmentssecurityonline.info · Aug 20, 2026
-
Chinese hack for hire Jewelbug blends espionage with crypto fraudwww.infosecurity-magazine.com · Aug 14, 2026
-
Jewelbug APT mixes espionage, crypto theft via custom malwarewww.darkreading.com · Aug 13, 2026