UnclassifiedUnknown
Calif
Calif is a threat actor group, tracked by Brandefense. It targets 3 sectors, including Technology and Finance, in the United States. It uses 1 MITRE ATT&CK technique.
- Techniques
- 1
- Exploited CVEs
- No CVE data
- First seen
- Nov 4, 2026
- Last seen
- Nov 4, 2026
- Record updated
Who They Target.
Countries · 1
About Calif.
A threat actor group that claimed to have jailbroken an Apple iPhone 18 Pro Max with Lockdown Mode enabled by sending a malicious PDF via AirDrop, allegedly gaining system-level access that persisted on iOS 27.2; it stated it does not intend to publicly release the exploit tool and claims to be reporting the discovered vulnerabilities to Apple.
Last updated Nov 4, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.