Threat Intelligence / Actor / FEMITBOT operators (unattributed financially-motivated cluster)

FEMITBOT operators (unattributed financially-motivated cluster)

1 tracked threat(s) · Categories: MALWARE

Also known as: FEMITBOT platform, FEMITBOT cluster

Tracked threats

FEMITBOT — Telegram Mini Apps Abused for Crypto Scams, Brand Impersonation & Android APK Malware Delivery (CTM360, May 2026) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence