logo

Operation FishMedley

ID: b0df9ff4-f16d-57f3-a448-20878fe33361

STIX ID: report--b0df9ff4-f16d-57f3-a448-20878fe33361

Feed Name: WeLiveSecurity (ESET Research)

Threat Score
90/100

Date Published: 2025-03-20

Date Updated: 2026-05-01

...
...

This ESET blogpost details Operation FishMedley, a 2022 global espionage campaign run by the FishMonger APT (linked to contractor I‑SOON), describing seven victim compromises across multiple countries, the use of modular implants (ShadowPad, Spyder, SodaMaster, RPipeCommander), credential theft and lateral movement techniques, collected IoCs (files, IPs, domains), and contextualizes the findings alongside a March 2025 DOJ indictment and FBI actions.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.