← All actors Recent activity

SANDMAN

SANDMAN

Indicators
4
Source reports
2
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02

Overview 4 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain4SANDMAN-domain.txt

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

Timeline 4 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 4 domain3 yrs ago

    sentinelone.com/labs/sandman-apt-a-mystery-group-target… · virustotal.com/gui/file/0b962ad02e8eef3c717ce6fcfda958…

    encagil.com
    explorecell.com
    mode.encagil.com
    ssl.explorecell.com

Further reading 2