Cybercrime
The Big Bang
0mentions, 7 days
2mentions, 30 days
Oct 30, 2026last mentioned
While it is not clear exactly what the attacker is looking for, what is clear is that once he finds it, a second stage of the attack awaits, fetching additional modules and/or malware from the Command and Control server. This then is a surveillance attack in progress and has been dubbed ‘Big Bang’ due to the attacker’s fondness for the ‘Big Bang Theory’ TV show, after which some of the malware’s modules are named.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
Recent activity
- Herdr has released native apphn · Oct 30, 2026
- Lumecast is live on iPhone and Android. It turns gifting into a shared moment: a room that gives together lights up. Gifts are real sky objects. 88 constellatiomastodon · Oct 28, 2026
References
- https://research.checkpoint.com/apt-attack-middle-east-big-bang/
- https://blog.talosintelligence.com/2017/06/palestine-delphi.html
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.