Windshift
Windshift is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets 7 sectors, including Government and Manufacturing, in 17 countries, including the United Kingdom and India. It uses 64 MITRE ATT&CK techniques and exploits 3 known CVEs.
Also known as
- Bahamut
- Windy Phoenix
- G0112
- Techniques
- 64
- Exploited CVEs
- 3
- First seen
- Jan 1, 2017
- Last seen
- Jan 15, 2019
- Record updated
Who They Target.
Sectors · 7
Countries · 17
Labelsespionagemena
About Windshift.
Windshift is a threat group that has been active since at least 2017, targeting specific individuals for surveillance in government departments and critical infrastructure across the Middle East.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.