Bahamut is a threat actor primarily operating in Middle East and Central Asia, suspected to be a private contractor to several state sponsored actors. They were observed conduct phishing as well as desktop and mobile malware campaigns.
Bahamut primarily operates in the Middle East and Central Asia.
Defenders should focus on scrutinizing suspicious email attachments, enhancing mobile device security, and enforcing strong multi-factor authentication.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.