NewsPenguin
- Primary motivation
- espionage
- Sophistication
- advanced
- Resource level
- organization
- Actor type
- nation-state
- Profile updated
- 2026-07-07 12:09:34
Targeted industries: defense-and-aerospace government-and-public-sector
Targeted regions: country_code:pk
Context
NewsPenguin is threat actor that has been targeting organizations in Pakistan. They use a complex payload delivery mechanism and exploit the upcoming Pakistan International Maritime Expo & Conference as a lure to trick their victims. The group has been linked to a phishing campaign that leverages spear-phishing emails and weaponized documents to deliver an advanced espionage tool.
Reports & references
- rewterz.com — Rewterz Threat Alert Newspenguin Threat Actors Targeting Pakistani Entities With Malicious Campaign Active Iocs (report)
- blogs.blackberry.com — Newspenguin A Previously Unknown Threat Actor Targets Pakistan With Advanced Espionage Tool (report)