Threat Intelligence / Actor / RomCom (Storm-0978) / Paper Werewolf (GOFFEE)

RomCom (Storm-0978) / Paper Werewolf (GOFFEE)

Nation: Russia · 1 tracked threat(s) · Categories: APT

Also known as: RomCom, Storm-0978, Tropical Scorpius, UNC2596, UAT-5647, Paper Werewolf, GOFFEE

Tracked threats

RomCom & Paper Werewolf Exploiting WinRAR CVE-2025-8088 Zero-Day via ADS Path Traversal — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence