Skip to content
Auto-CTI
Back to all actors

ToddyCat

Nation-state Dormant
Mentions
2
First seen
30 Jun 2026
Last seen
07 Jul 2026

Relevant to you · Relevant

Threat focus:
espionage / aptindustrial / ot espionage
Sector / region:
Manufacturing

Origin

Unattributed

Sources

inferred Confidence medium

Profile

ToddyCat is a threat actor that, according to a Q1 2026 threat landscape report, targets industrial automation systems. The actor is also associated with a hidden email assistant, indicating email-based espionage. These capabilities suggest a focus on industrial espionage.

Affected vendors

Google

Targeted sectors

Industrial Automation

Associated malware / tools

Hidden Email Assistant

Activity (8 weeks)

39
40
41
42
43
44
45
46

Recent activity

ESC

…