Threat actorChinaTracked since 2026-08

REF7707

Also known as:Jewelbug

As of 2026-08-13, REF7707 is a China-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning threat intel. Also known as Jewelbug.

Tracked threats: 11 high
First seen: 2026-082026-08-13
Last seen: 2026-082026-08-13
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: ChinaNation or origin

Nation: China · 1 tracked threat(s) · Categories: THREAT_INTEL

Activity timeline

REF7707 appears in 1 tracked threat between 2026-08-13 and 2026-08-13.

Tracked threats

Jewelbug APT Runs Espionage and Crypto Fraud Operations Side by SideHIGH2026-08-13