Threat actorTracked since 2026-05

PhishU Framework operators

Also known as:PhishU operatorsPhishU red-team customers

As of 2026-05-30, PhishU Framework operators is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning phishing. Also known as PhishU operators, PhishU red-team customers.

Tracked threats: 11 high
First seen: 2026-052026-05-28
Last seen: 2026-052026-05-28
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced

1 tracked threat(s) · Categories: PHISHING

Activity timeline

PhishU Framework operators appears in 1 tracked threat between 2026-05-28 and 2026-05-28.

Tracked threats

VaultJacking — Google Password Manager Vault Theft via Single Captured 6-Digit PIN (PhishU Framework)HIGH2026-05-28