Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities

As cited

Copy frozen at 2026-09-07 09:31 UTC (site build).

threat intel

Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities

Pawn Storm deployed PRISMEX, a backdoor leveraging steganography and cloud abuse, against the Ukrainian defense supply chain in a campaign observed by TrendAI Research. The intrusions used email-based vectors to establish persistence on target systems. The campaign targeted government and critical infrastructure entities.

Why it matters: Ukrainian defense officials, procurement officers, and critical infrastructure operators face active compromise via email and cloud services; incident responders should monitor for PRISMEX indicators and steganographic payloads in suspicious communications.

Source published

2026-03-26 00:00 UTC

First seen by Cybersecurity Tracker

2026-09-07 08:09 UTC