Skip to content

CyberSIXT Search

Threat actor

Vanilla Tempest

Tracked by CyberSIXT since 16 Oct 2025 · last activity 20 Jan

Also Vice SocietyMalpedia

articles · all time: 3
outlets: 3

Three articles so far, 16 Oct 2025 to 20 Jan.

Thu 16 Oct 2025 · first reportMicrosoft Halts Vanilla Tempest Cyberattack by Revoking Malicious Teams Installer CertificatesGBHackers
Fri 17 Oct 2025Microsoft revokes 200+ certificates abused by Vanilla Tempest in fake Teams campaignSecurity Affairs
Tue 20 JanMalformed & Dangerous: Gootloader Returns with New Ransomware TiesSecurityOnline

See the full timeline

CVEs

No CVE is named alongside Vanilla Tempest in CyberSIXT coverage.

Coverage

3 articles, all timeFull timeline RSS feed

20 JanMalformed & Dangerous: Gootloader Returns with New Ransomware TiesSecurityOnline
17 Oct 2025Microsoft revokes 200+ certificates abused by Vanilla Tempest in fake Teams campaignSecurity Affairs
16 Oct 2025Microsoft Halts Vanilla Tempest Cyberattack by Revoking Malicious Teams Installer CertificatesGBHackers · first in our coverage