Skip to content
brandefense.io
Request A Demo
Nation-state APTEspionageIntermediate sophistication

ReconHellcat

ReconHellcat is a nation-state APT group with an espionage motive, tracked by Brandefense.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 5, 2021
Last seen
Jan 5, 2021
Record updated

Campaigns.

  1. BlackSoul CampaignJan 2021

About ReconHellcat.

An advanced threat group known for targeting government, diplomatic, and defense entities using multi-stage loaders, Cloudflare Workers C2 infrastructure, and custom malware families including BlackWater and BlackSoul.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.