ModifiedElephant
- First seen
- 2011-01-01 00:00:00
- Primary motivation
- ideology
- Sophistication
- minimal
- Resource level
- individual
- Actor type
- nation-state
- Profile updated
- 2026-07-07 12:01:48
Targeted industries: government-and-public-sector media-and-entertainment education-and-nonprofits
Targeted regions: country_code:in
Context
Our research into these intrusions revealed a decade of persistent malicious activity targeting specific groups and individuals that we now attribute to a previously unknown threat actor named ModifiedElephant. This actor has operated for years, evading research attention and detection due to their limited scope of operations, the mundane nature of their tools, and their regionally-specific targeting. ModifiedElephant is still active at the time of writing.
Reports & references
- sentinelone.com — Modifiedelephant Apt And A Decade Of Fabricating Evidence (report)