The Urpage Connection to Bahamut, Confucius and Patchwork

Trend Micro's analysis links the unnamed Urpage actor to Bahamut, Confucius, and Patchwork, highlighting shared Delphi file-stealer backdoors and Android malware, coupled with phishing websites and decoy documents aimed at InPage users and Middle East-focused audiences, illustrating a connected threat ecosystem and cross-group tool diffusion.