Threat actorRussiaTracked since 2026-03

Doppelganger Proxy Operators

Also known as:Doppelganger OperatorsFaceless Operators

As of 2026-05-30, Doppelganger Proxy Operators is a Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as Doppelganger Operators, Faceless Operators.

Tracked threats: 11 high
First seen: 2026-032026-03-11
Last seen: 2026-032026-03-11
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: RussiaNation or origin

Nation: Russia · 1 tracked threat(s) · Categories: MALWARE

Activity timeline

Doppelganger Proxy Operators appears in 1 tracked threat between 2026-03-11 and 2026-03-11.

Tracked threats

KadNap Botnet Targeting Asus Routers via Kademlia DHT C2 for Doppelganger Proxy NetworkHIGH2026-03-11