UnclassifiedIdeologyAdvanced sophistication
WIP19
WIP19 is a threat actor group with an ideological motive, tracked by Brandefense.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
About WIP19.
A newly discovered threat group conducting espionage activities. Targets telecommunication and IT service providers. Engages in credential harvesting, network scanning, keylogging, screen capturing, and deploys SQLMaggie. Uses stolen digital certificates for malware signing and operates manually.
Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.