Activity timeline
IPIDEA Operators appears in 1 tracked threat between and .
Threat actorMultiple (China, Russia, Iran, North Korea)Tracked since 2026-02
IPIDEA Operators
Also known as:APT28SandwormVolt Typhoon
As of 2026-05-30, IPIDEA Operators is a Multiple (China, Russia, Iran, North Korea)-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning threat intel. Also known as APT28, Sandworm, Volt Typhoon.
- Tracked threats
- 11 high
- First seen
- 2026-02-03
- Last seen
- 2026-02-03
- ATT&CK techniques
- —No mapped techniques yet
- Related CVEs
- 0None referenced
- Attribution
- Multiple (China, Russia, Iran, North Korea)Nation or origin