Stealth Mango and Tangelo

🇵🇰Pakistan-attributed

aliases

Intelligence Profile

This threat actor targets organizations in the satellite communications, telecommunications, geospatial-imaging, and defense sectors in the United States and Southeast Asia for espionage purposes.

Threat Analysis

Stealth Mango and Tangelo is a known-sophistication threat actor attributed to Pakistan, engaged in cyber operations with a primary motivation of espionage.

The group's espionage-oriented operations suggest a state-sponsored or state-aligned mandate, typically focused on stealing intellectual property, government secrets, or military intelligence. Targets are usually selected for strategic value rather than financial gain.

External References

→https://www.cfr.org/interactive/cyber-operations/stealth-mango-and-tangelo

→https://www.lookout.com/blog/stealth-mango

Quick Facts

TypeAPT / Threat Group

Motivation🕵️ espionage

Origin🇵🇰 Pakistan

Aliases1

Also Known As

Stealth Mango and Tangelo

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Stealth Mango and Tangelo