Threat Group – Highly sophisticated nation state actor
Threat Type – Data breach and supply chain compromise
Exploited Vulnerabilities – Initial access vector undisclosed. CVE 2025 54500 is a separate HTTP2 data plane denial of service flaw, not the entry point for the breach.
Malware Used – Not publicly disclosed
Threat Score – 🔴 7.5