Skip to content

Hide Navigation Hide TOC

Cyclops Blink (68792756-7dbf-41fd-8d48-ac3cc2b52712)

Cyclops Blink is a modular malware that has been used in widespread campaigns by Sandworm Team since at least 2019 to target Small/Home Office (SOHO) network devices, including WatchGuard and Asus. Cyclops Blink is assessed to be a replacement for VPNFilter, a similar platform targeting network devices.[NCSC Cyclops Blink February 2022][NCSC CISA Cyclops Blink Advisory February 2022][Trend Micro Cyclops Blink March 2022]

Cluster A Galaxy A Cluster B Galaxy B Level
Cyclops Blink (68792756-7dbf-41fd-8d48-ac3cc2b52712) Tidal Software Sandworm Team (16a65ee9-cd60-4f04-ba34-f2f45fcfc666) Tidal Groups 1