Threat actor

Kingdom of Bahrain

Updated 2 months ago

Trending this weekNot trendingOutside this week’s top 100

Mention activity · 30 daysNo mention activity in the last 30 days.

CVEs0Associated

Malware2Families

ATT&CK4Techniques

IOCs0Tracked

Motivation: —

Also known asKingdom of Bahrain

Are they targeting you?See whether this actor's campaigns touch your sector, your geography, or the products you run, and get alerted when that changes.

Check your exposure

MITRE ATT&CK

Tradecraft

4 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt.

2 of 15 tactics4 techniques

= intelligence reports citing the technique

TA0009Collection3 techniques

T1005Data from Local System

T1123Audio Capture

T1125Video Capture

TA0011Command and Control1 technique

T1105Ingress Tool Transfer

Arsenal

Associated malware families

2 malware families attributed to this actor across reporting.

FamilyContextEvidenceLast seen

FinFisherThe claimants alleged that, starting in 2011, their devices in the United Kingdom were targeted with FinSpy spyware; the alleged conduct included installing and running the spyware, exfiltrating data, and activating microphones and cameras.1Aug 28, 2026 PegasusPegasus is discussed as spyware allegedly used by Saudi Arabia, Bahrain, the United Arab Emirates, and Rwanda to target dissidents, journalists, and opposition figures in the United Kingdom.1Aug 28, 2026

Activity feed

Recent activity

No public activity tracked yet. Mallory keeps watching.

View more in app →

No public activity observed for this threat actor.

Are they targeting you?See whether this actor's campaigns touch your sector, your geography, or the products you run, and get alerted when that changes.

Check your exposure

Mallory platform

The version that knows your environment.

This page is what's public. Mallory adds the parts that aren't: whether this actor's tooling has touched your footprint, the IOCs they're burning right now, and the detections to deploy next.

Start Free Trial Open in App ↗

Target overlapMatch sector + geo + tech-stack targeting against your real footprint.

Tradecraft mapping4Every observed MITRE ATT&CK technique, grouped by tactic.

Malware arsenal2Families this actor is known to deploy, with IOCs and behavior.

Exploited CVEsCVEs this actor has used in known campaigns.

Detection signaturesYARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

ObservablesDomains, IPs, and hashes tied to this actor, refreshed continuously.

Kingdom of Bahrain

Updated 2 months ago

Trending this weekNot trendingOutside this week’s top 100

Mention activity · 30 daysNo mention activity in the last 30 days.

CVEs0Associated

Malware2Families

ATT&CK4Techniques

IOCs0Tracked

Motivation: —

Also known asKingdom of Bahrain

Are they targeting you?See whether this actor's campaigns touch your sector, your geography, or the products you run, and get alerted when that changes.

Check your exposure