daily cyber × ai intelligence

← threat actors

threat actor

APT-C-60

also tracked as apt q 12 1

1 story · 1 in the wild · July 15, 2026 – July 15, 2026

evidence: 1 observed

geography

  • russia 1 · Jul 15

what we reported, newest first, grouped by story

July 15, 2026

  • Russian cluster APT-C-60/APT-Q-12 is abusing GitLab, jsDelivr, and Codeberg — not just GitHub — as attack infrastructure, per JPCERT/CC. JPCERT/CC · Jul 15 · observed · as apt q 12 · Threat Activity