Caramel Tsunami is a threat actor that specializes in spyware attacks. They have recently resurfaced with an updated toolset and zero-day exploits, ta...

Threat Actor Profile

Caramel Tsunami

Real-Time Alerts

Actor Overview

Related Threat Reports

Premium
APT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated

Get alerts when new intel on Caramel Tsunami is published.

Actor Details

Primary Name
Caramel Tsunami
Known Aliases
SOURGUM, Candiru
Data Source
Precursor Intelligence
Need API Access?

Integrate threat actor data into your SIEM or SOAR.

View Plans →