Threat actorTracked since 2026-05

SHADOW-AETHER-040 & SHADOW-AETHER-064

Also known as:SHADOW-AETHER-040SHADOW-AETHER-064Vibe Hacking

As of 2026-05-30, SHADOW-AETHER-040 & SHADOW-AETHER-064 is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning apt. Also known as SHADOW-AETHER-040, SHADOW-AETHER-064, Vibe Hacking.

Tracked threats: 11 critical
First seen: 2026-052026-05-12
Last seen: 2026-052026-05-12
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 2Referenced by its activity

1 tracked threat(s) · Categories: APT

Activity timeline

SHADOW-AETHER-040 & SHADOW-AETHER-064 appears in 1 tracked threat between 2026-05-12 and 2026-05-12.

Tracked threats

SHADOW-AETHER-040 & SHADOW-AETHER-064 — Agentic AI-Driven Intrusion Campaigns Targeting LATAM Government and Financial Sectors (Vibe Hacking)CRITICAL2026-05-12

Related CVEs

2 CVEs referenced by tracked SHADOW-AETHER-040 & SHADOW-AETHER-064 activity

CVE-2021-4034
CVE-2016-5195