Skip to content
Auto-CTI
Back to all actors

Fox Tempest

Cybercrime Financial Dormant
Mentions
2
First seen
22 May 2026
Last seen
25 May 2026

Relevant to you · Affects your stack

Technology:
Microsoft Defender for EndpointCanon Multi-Function Printers
Threat focus:
supply chain
Sector / region:
Manufacturing

Origin

Unattributed

Profile

Fox Tempest is a threat actor notable for multi-stage Linux intrusions, gaining access via edge appliances like F5 and collaboration software such as Confluence to achieve enterprise-wide compromise.

Affected vendors

MicrosoftGitHubNxF5Atlassian

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC