Webworm
Nation-state Espionage China Dormant
Aliases: Space Pirates
- Mentions
- 1
- First seen
- 22 May 2026
- Last seen
- 22 May 2026
Relevant to you · Relevant
- Threat focus:
- espionage / apt
- Sector / region:
- DACH
Origin
China
Profile
Webworm is a Chinese threat actor. It has been observed using Discord and Microsoft Graph APIs to target European Union governments. The attacks involve exploiting these services to gain access to government systems.
Affected vendors
Microsoft
Targeted sectors
Government
Targeted regions
Europe
Targeted countries
European Union