
- Tomiris APT targets government bodies with multi-language malware implants
- Group hides C2 traffic in Telegram/Discord, using phishing for initial access
- Campaign focuses on state-level intelligence, hitting Russia and Central Asian institutions
Tomiris, a Russian-speaking APT hacking group, has narrowed down its attack focus to target government ministries, intergovernmental organizations, and politically significant institutions.