Skip to content
brandefense.io
Request A Demo
Nation-state APTEspionage

RedStinger

RedStinger is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets 4 sectors, including Government, and Transportation and Logistics, in Ukraine.

Also known as
  • Bad Magic
  • CloudWizard
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2020
Record updated

Who They Target.

Sectors · 4
Countries · 1

About RedStinger.

Although the initial vector of compromise is unclear, the details of the next stage imply the use of spear phishing or similar methods. The victims navigated to a URL pointing to a ZIP archive hosted on a malicious web server.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.