Telemancon

Telemancon is a newly disclosed threat cluster first publicly identified in 2025 among active pro-state intrusion groups targeting organizations in Russia and the CIS. Publicly available reporting in the available corpus provides only minimal attribution and no corroborated technical profile, malware lineage, victimology, or campaign-level tradecraft specific to this actor. Telemancon has been listed alongside other newly separated clusters such as Silent Lynx, Mythic Likho, NGC6061, NGC4141, SkyCloak, and NGC5081, indicating it is treated as a distinct operational grouping rather than a generic label. Beyond that classification, high-confidence details on its targets, sectors, geographic focus, tooling, initial access methods, persistence mechanisms, command-and-control patterns, or links to a specific state sponsor are currently not available. Given the lack of confirmed public technical detail, Telemancon should presently be regarded as an emerging cluster name with insufficient open information for reliable assessment of aliases, sub-groups, or ATT&CK-mapped behavior. Additional reporting is required before making defensible claims about its capabilities, infrastructure, or geopolitical alignment.