Keymous
Keymous is a threat actor group, tracked by Brandefense. It targets organisations in Egypt. It uses 1 MITRE ATT&CK technique.
- Keymous Plus
- Techniques
- 1
- Exploited CVEs
- No CVE data
- First seen
- Jun 8, 2025
- Last seen
- Aug 17, 2025
- Record updated
Who They Target.
About Keymous.
Keymous is a threat actor known for executing extensive DDoS attacks across multiple Arab countries, targeting government ministries and critical infrastructure. The group has claimed access to sensitive data, including over 300,000 records from Israel's Ministry of Education, and has engaged in reconnaissance activities against various ministries in Bahrain and other nations. Keymous employs diverse infrastructure, including compromised IoT devices and DDoS-for-hire platforms, to amplify attack bandwidth. Their operations have been characterized by a focus on politically motivated cyberattacks, particularly in the context of regional conflicts.
Last updated Sep 12, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.