Velvet Ant
Unknown Dormant
- Mentions
- 1
- First seen
- 12 Jun 2026
- Last seen
- 12 Jun 2026
Relevant to you · Relevant
- Threat focus:
- supply chain
Origin
Unattributed
Profile
Velvet Ant is a China-linked threat actor known for backdooring a Linux login software. This backdoor allowed the group to hide in compromised systems for nearly a decade. The attack represents a supply chain compromise that granted persistent access.
Affected vendors
PamOpenSSHCiscoF5