WindShift is a threat group that has been active since at least 2017, and has targeted specific individuals for surveillance in government departments and critical infrastructure across the Middle East.

Other names for this threat


This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.