Winter Vivern
MITRE G1056Also known as TA473
Reports
4
First seen
Jul 10, 2026
Last seen
Sep 24, 2026
Motivation
Espionage
Relationships
Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.
Top ATT&CK techniques
T1190 Exploit Public-Facing Application ×3T1059 Command and Scripting Interpreter ×3T1566 Phishing ×1T1078 Valid Accounts ×1T1066 Commonly Used Port ×1T1592 Gather Victim Identity Information ×1
Indicators
cve ×11
Indicator values are available on Pro and via the API.
Associated CVEs
Recent reports
High