Skip to content
Auto-CTI
Back to all actors

OP-512

Unknown Dormant
Mentions
1
First seen
05 Jun 2026
Last seen
05 Jun 2026

Relevant to you · Relevant

Threat focus:
industrial / ot espionage
Sector / region:
Manufacturing

Origin

Unattributed

Profile

OP-512 is a new threat cluster targeting Microsoft IIS servers. The actor uses a custom web shell framework to compromise the servers. The goal is likely to establish persistent access and execute commands. Further details are not available from the provided headlines.

Affected vendors

Microsoft

Associated malware / tools

Custom web shell framework

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC