NSO Group
Reports
9
First seen
Jun 8, 2026
Last seen
Oct 14, 2026
Motivation
Espionage, Financial
Targeting
Victim regions
×1×2
Serbia×2
United States×2
El Salvador×1
Poland×1
Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.
Top ATT&CK techniques
T1566 Phishing ×6T1598 Phishing for Information ×4T1005 Data from Local System ×4T1113 Screen Capture ×2T1041 Exfiltration Over C2 Channel ×2T1204 User Execution ×2T1195 Supply Chain Compromise ×1T1486 Data Encrypted for Impact ×1T1190 Exploit Public-Facing Application ×1T1559.001 Application Layer Protocol: Web Protocols ×1T1133 External Remote Services ×1T1123 Audio Capture ×1
Indicators
domain ×8cve ×4
Indicator values are available on Pro and via the API.
Associated CVEs
Recent reports
Critical