logo

Sowbug: Cyber espionage group targets South American and Southeast Asian governments | Symantec Connect Community

ID: 3ec4068d-29a2-4c05-9ea7-1d861cde8f58

STIX ID: report--3ec4068d-29a2-4c05-9ea7-1d861cde8f58

Threat Score

70/100

Uploaded: 2026-08-19

Published Date: 2017-11-08

Last Modified Date: 2017-11-08

Created by: dogesec

TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
Symantec's Security Response profiles Sowbug, a cyber espionage group targeting South American and Southeast Asian governments since at least 2015, using custom malware (Felismus and Starloader) to exfiltrate documents and maintain long-term footholds across victim networks, with reconnaissance, lateral movement, and attempts to avoid detection.