Skip to content

TetrisPhantom

TetrisPhantom is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Government sector.

Techniques
0
Exploited CVEs
No CVE data
Record updated

Who They Target.

Sectors · 1

About TetrisPhantom.

TetrisPhantom relies on compromising of certain type of secure USB drives that provide hardware encryption and is commonly used by government organizations. While investigating this threat, experts identified an entire spying campaign that uses a range of malicious modules to execute commands, collect files and information from compromised computers and transfer them to other machines also using secure USB drives.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.