APT / THREAT GROUP

Potemkin

2
aliases
Last seen:Aug 1, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.potemkin

Threat Analysis

Potemkin is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning Potemkin

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
The Hacker News· Jun 16, 2026
Potemkin Loader & RMMProject The Anatomy of a ClickFix Attack
Huntress Blog· Jun 16, 2026

External References

→https://medium.com/walmartglobaltech/metastealer-traffic-new-dgas-and-analyzing-the-tracker-backdoor-dga-with-ai-96ea63dc7c01
→https://www.huntress.com/blog/potemkin-loader-rmmproject-clickfix-attack

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

win.potemkinPotemkin

External Intelligence

Malpedia: win.potemkin

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Potemkin