Introducing the REF5961 intrusion set

As cited

Copy frozen at 2026-09-19 19:56 UTC (site build).

threat intel

Introducing the REF5961 intrusion set

A threat actor tracked as REF5961 has deployed three new malware families against targets in ASEAN countries. The intrusion set demonstrates ongoing capability development and refinement.

Why it matters: Organizations in Southeast Asia should review their threat intelligence feeds and endpoint monitoring for indicators related to REF5961 to detect and block this emerging malware.

Source published

2023-10-04 00:00 UTC

First seen by Cybersecurity Tracker

2026-09-19 17:45 UTC