Sowbug: Cyber espionage group targets South American and Southeast Asian governments | Symantec Connect Community
ID: 3ec4068d-29a2-4c05-9ea7-1d861cde8f58
STIX ID: report--3ec4068d-29a2-4c05-9ea7-1d861cde8f58
Threat Score
70/100
Uploaded: 2026-08-19
Published Date: 2017-11-08
Last Modified Date: 2017-11-08
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
Symantec's Security Response profiles Sowbug, a cyber espionage group targeting South American and Southeast Asian governments since at least 2015, using custom malware (Felismus and Starloader) to exfiltrate documents and maintain long-term footholds across victim networks, with reconnaissance, lateral movement, and attempts to avoid detection.
