Threat Intelligence / Actor / OceanLotus (APT32)

OceanLotus (APT32)

Nation: Vietnam · 1 tracked threat(s) · Categories: MALWARE

Also known as: APT32, OceanLotus, SeaLotus, APT-C-00, Cobalt Kitty, Ocean Buffalo, Canvas Cyclone, TIN WOODLAWN

Tracked threats

OceanLotus (APT32) PyPI Supply Chain Campaign — ZiChatBot Cross-Platform Malware via uuid32-utils, termncolor & colorinal Wheels Using Zulip REST API for C2 — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence