Threat actorN/ATracked since 2026-03

GhostClaw Operator

Also known as:SectionnaenumerateFinPyromancerLogCrestdrasnipHeartflabrace

As of 2026-05-30, GhostClaw Operator is a N/A-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as Sectionnaenumerate, FinPyromancerLog, Crestdrasnip, Heartflabrace.

Tracked threats

11 high

First seen

2026-032026-03-20

Last seen

2026-032026-03-20

ATT&CK techniques

—No mapped techniques yet

Related CVEs

0None referenced

Attribution

N/ANation or origin