Skip to content
CybercrimeFinancialAdvanced sophistication

DarkSpectre

DarkSpectre is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 9 MITRE ATT&CK techniques.

Techniques
9
Exploited CVEs
No CVE data
First seen
Dec 30, 2025
Last seen
Dec 30, 2025
Record updated

About DarkSpectre.

A China-linked threat actor responsible for a seven-year span of cyber espionage activities, impacting over 7.8 million users. Known for browser extension campaigns like Zoom Stealer, GhostPoster, and ShadyPanda, focusing on data exfiltration and corporate espionage.

Last updated Jul 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.