ctrlINT What the industry said about every indicator, with the quote

ModernStealerThreat actor

ModernStealer is linked to underground posts offering sensitive military, government, nuclear, and aerospace material, with connections to a Session contact identifier and a Telegram account named Sassoon Don. Analysts identified five ModernStealer listings and eight government-related listings, including references to Pakistan’s NUST and SUPARCO, as well as US defense entities.From MISP Galaxy

Last reported 2 months ago, by AhnLab ASEC1 report

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each

  1. “An analysis of a network selling military and government-related data linked to ModernStealer has been confirmed.”

    AhnLab ASECVendor
    July 2026 Dark Web Threat Actor Trend Report

Thanks — we review every report.

Report a wrong match
What is wrong with ModernStealer here?
No account needed. We do not store your IP address.