Skip to content
Auto-CTI
Back to all actors

ToddyCat

Nation-state Active
Mentions
2
First seen
30 Jun 2026
Last seen
07 Jul 2026

Relevant to you · Relevant

Threat focus:
espionage / aptindustrial / ot espionage
Sector / region:
Manufacturing

Origin

Unattributed

Sources

inferred Confidence medium

Profile

ToddyCat is a threat actor that, according to a Q1 2026 threat landscape report, targets industrial automation systems. The actor is also associated with a hidden email assistant, indicating email-based espionage. These capabilities suggest a focus on industrial espionage.

Affected vendors

Google

Targeted sectors

Industrial Automation

Associated malware / tools

Hidden Email Assistant

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC