Mirage

aliases

Last seen:May 20, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.mirage

Threat Analysis

Mirage is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://st.drweb.com/static/new-www/news/2020/july/Study_of_the_APT_attacks_on_state_institutions_in_Kazakhstan_and_Kyrgyzstan_en.pdf

→https://web.archive.org/web/20200509171721/https://raw.githubusercontent.com/fdiskyou/threat-INTel/master/2015/GlobalThreatIntelReport.pdf

→https://www.intezer.com/miragefox-apt15-resurfaces-with-new-tools-based-on-old-ones/

→https://www.secureworks.com/research/threat-profiles/bronze-palace

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

Miragewin.mirage

External Intelligence

Malpedia: win.mirage

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Mirage