UnclassifiedIdeologyAdvanced sophistication
Cavalry Werewolf
Cavalry Werewolf is a threat actor group with an ideological motive, tracked by Brandefense.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
About Cavalry Werewolf.
Threat actor linked to YoroTrooper, targeting Russian public sector. Uses custom malware FoalShell and StallionRAT, and phishing. Sophistication is advanced. The document links Cavalry Werewolf to state-affiliated and financially motivated attackers.
Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.