CyberSIXT Search
Threat actor

Phantom Taurus

China

Tracked by CyberSIXT since 30 Sep 2025

Articles · all time
6
Articles · last 30 days
0
CVEs exploited · attributed · all time
0
Research reports · all time
0

6 articles from 6 outlets since 30 Sep 2025; the latest 389 days ago.

Phantom Taurus: coverage over time6 articles from 6 outlets. First report 30 Sep 2025 by Unit 42. Busiest week: 6 articles, week of 29 Sep 2025. 0 in the last 7 days. Phantom Taurus: coverage over time6 articles from 6 outlets. First report 30 Sep 2025 by Unit 42. Busiest week: 6 articles, week of 29 Sep 2025. 0 in the last 7 days.
  • Article
Show as table
Phantom Taurus: articles
Published (UTC)OutletHeadline
Thu 2 Oct 2025 · 08:10 UTCSecurity AffairsChina-linked APT Phantom Taurus uses Net-Star malware in espionage campaigns against key sectors
Wed 1 Oct 2025 · 12:35 UTCSecurityWeekChinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware
Wed 1 Oct 2025 · 02:55 UTCSecurityOnlinePhantom Taurus: New Chinese APT Emerges with Fileless NET-STAR Backdoor Targeting Global Governments and Telecoms
Tue 30 Sep 2025 · 17:35 UTCThe Hacker NewsPhantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware
Tue 30 Sep 2025 · 14:26 UTCGBHackersNew Chinese Nexus APT Group Targeting Organizations to Deploy NET-STAR Malware Suite
Tue 30 Sep 2025 · 10:35 UTCUnit 42Phantom Taurus: 新たな中華系Nexus APTとNET-STARマルウェア スイートの発見

Who reported 6 outlets

  • Unit 421
  • GBHackers1
  • The Hacker News1
  • SecurityOnline1
  • SecurityWeek1
  • Security Affairs1
See the full timeline

Names and sources

CL-STA-0043
Named by CyberSIXT coverage
CL-STA-0043
Named by Malpedia · cl-sta-0043
Phantom Taurus
Named by Malpedia · cl-sta-0043
TGR-STA-0043
Named by Malpedia · cl-sta-0043
CL-STA-0043
Named by MISP Galaxy · 5d0aee14-f18a-44da-a44d-28d950f06b9c
Phantom Taurus
Named by MISP Galaxy · 5d0aee14-f18a-44da-a44d-28d950f06b9c
TGR-STA-0043
Named by MISP Galaxy · 5d0aee14-f18a-44da-a44d-28d950f06b9c
5d0aee14-f18a-44da-a44d-28d950f06b9c
Named by CyberSIXT coverage

Attributed facts

origin
China (MISP Galaxy · 5d0aee14-f18a-44da-a44d-28d950f06b9c)

Coverage

6 articles, all timeFull timeline RSS feed
  1. China-linked APT Phantom Taurus uses Net-Star malware in espionage campaigns against key sectorsSecurity Affairs
  2. Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star MalwareSecurityWeek
  3. Phantom Taurus: New Chinese APT Emerges with Fileless NET-STAR Backdoor Targeting Global Governments and TelecomsSecurityOnline
  4. Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth MalwareThe Hacker News
  5. New Chinese Nexus APT Group Targeting Organizations to Deploy NET-STAR Malware SuiteGBHackers
  6. Phantom Taurus: 新たな中華系Nexus APTとNET-STARマルウェア スイートの発見Unit 42 · first in our coverage

Learn more

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device