Skip to content
brandefense.io
Request A Demo
Nation-state APTEspionage

Mysterious Elephant

Mysterious Elephant is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets organisations in Pakistan.

Also known as
  • APT-K-47
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2023
Record updated

Who They Target.

Countries · 1

About Mysterious Elephant.

Mysterious Elephant is an APT group active since 2023 that primarily targets government and foreign affairs entities across South Asia, especially Pakistan, Bangladesh, Sri Lanka, Nepal, and Afghanistan. In its early-2025 campaign it shifted toward spear-phishing and custom/customized tools, including the BabShell reverse shell and MemLoader HidenDesk/Edge loaders, to deploy RATs like Remcos and VRat, while also using WhatsApp-specific exfiltration tools to steal shared documents, images, and archives. The group shares code and infrastructure with other APT clusters (Origami Elephant, Confucius, SideWinder), reflecting ongoing tool reuse and collaboration among South Asian threat actors.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.