ExcaliburMalware
- Saber
- sabresac
Last reported 4 days ago, by ransomware.live3 reports
ATT&CK techniques
1 technique · each with the sentence it comes from- T1056.001Keylogging
“This means initial implants are relatively small and plugins are used to provide capabilities for clipboard monitoring, keylogging, file management, or interactive shell access.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
3 reports, newest first · the exact sentence from each-
Dark Project lists The Excalibur Group“Dark Project lists The Excalibur Group”
-
qilin lists The Excalibur Group“qilin lists The Excalibur Group”
-
China's AI-Enabled APT Operations Are Getting Interesting“… some of the group to target Iranian companies. In spring 2025, [one of the group's leaders] Mojtaba Ghal'eh-Kuhi and [hands-on hacker] Saber Shahbazi Balujeh compromised and exfiltrated data from an Iranian telecommunications company.”
Thanks — we review every report.