Technology
255 entities tracked across Lowdown briefings. Page 4 of 5.
Qiwa
Saudi Arabia's digital labour-market platform, run by the Ministry of Human Resources and Social Development, that now issues the work permit Premium Residency holders must obtain before taking a job.
@qqbrowser/openclaw-qbotA JavaScript package on the npm registry, version 0_0_130, compromised by UNC1069 in the May 2026 WAVESHAPER campaign expansion
Raptor Train
200,000-device botnet of compromised SOHO routers and cameras; operated by Flax Typhoon via Integrity Technology Group.
Raybird
Ukrainian-designed fixed-wing drone manufactured by Skyeton/Prevail, bidding for the UK's Project Corvus Watchkeeper replacement contract.
recombinant MPXVA recombinant monkeypox virus carrying genetic material from both clade Ib and clade IIb lineages, first detected in a UK traveller in December 2025 and now found in at least four countries; transmissibility relative to parent strains is undetermined.
REGN3479
A Regeneron-developed monoclonal antibody targeting Bundibugyo ebolavirus, now in the first authorised Bundibugyo treatment trial alongside MBP134.
remdesivir
Broad-spectrum antiviral now dosing patients in the WHO Bundibugyo Ebola trial, cleared 2 July 2026.
ReverseSocks5Open-source reverse SOCKS5 proxy used alongside EarthWorm for redundant C2 tunnels.
Robots.txtWebsite file expressing crawler access preferences through the Robots Exclusion Protocol.
RoguePlanetResearcher-named Windows Defender flaw; CVE assignment, CVSS score, and patch status remain contested.
RQ-170 Sentinel
US stealth reconnaissance drone built by Lockheed Martin.
RQ-4
Northrop Grumman high-altitude long-endurance surveillance drone; Iran shot one down in June 2019.
rVSVRecombinant vesicular stomatitis virus vaccine platform underlying Ervebo, the licensed Zaire Ebola vaccine.
S-300
Russian long-range surface-to-air missile family; Iran's S-300PMU-2 batteries arrived from Russia in 2016.
S-400
Russian long-range surface-to-air missile system developed by Almaz-Antey, in service since 2007.
Salmonella BovismorbificansSalmonella Bovismorbificans is a Salmonella serovar involved in a separate EU foodborne cluster linked to sprouted seeds, with an ECDC Rapid Outbreak Assessment due 25 June 2026.
Salmonella Stanley ST2045
A specific Salmonella sequence type behind a 10-country EU foodborne cluster of 83 cases, with chicken products suspected.
Sampson
BAE Systems AESA multifunction radar on Royal Navy Type 45 destroyers; tracks 1,000+ targets.
SAMP/T NG
Franco-Italian next-generation surface-to-air system, positioned as Europe's Patriot alternative.
SANDCLOCKA credential stealer used by UNC6780 (TeamPCP) to exfiltrate AWS keys, GitHub tokens, and supply-chain credentials enabling downstream repository and infrastructure access.
Saronic Corsair
A 24-foot autonomous unmanned surface vessel (USV) developed by Saronic Technologies, operated by US Navy Task Force 59, which performed the first confirmed drone-boat combat personnel recovery in June 2026.
SAVE SystemFederal DHS database that verifies citizenship and immigration status for benefits and voter-roll checks.
S-bandConventional spacecraft radio band; the baseline Orion comms link O2O laser is outpacing by 200x.
SDONASA Sun-monitoring spacecraft providing imagery for Artemis II solar storm forecasting.
Sea Baby
Ukrainian SBU-operated uncrewed surface vessel used repeatedly against Russian naval and shadow-fleet targets.
Sea Viper
Royal Navy long-range surface-to-air missile system on Type 45 destroyers; Aster 30 and Sampson radar.
Security Assertion Markup LanguageXML-based OASIS standard for exchanging authentication assertions, used for enterprise single sign-on.
@shadanai/openclawA JavaScript package on npm compromised by UNC1069 in May 2026.
Shahed-136
Iranian one-way attack drone used by Russia in Ukraine and by Iran against Gulf targets.
Shai-HuludShai-Hulud is UNC6780's supply-chain worm framework, released as open-source on GitHub under an MIT licence on 12 May 2026 with a $1,000 Monero bounty, enabling copycat campaigns including Megalodon.
ShellshockCritical 2014 GNU Bash code-injection vulnerability, CVE-2014-6271.
Shetab
Iran's national interbank electronic payment network, clearing domestic card transactions; being integrated with Russia's Mir system to enable cross-border payments outside Western financial infrastructure.
Sistema Consular Integrado (Brazil)
Brazilian Foreign Ministry's online system for consular visa applications.
Sistema Eléctrico Nacional
Cuba's National Electric System; collapsed entirely five times in 2026, including three times within eight days in July.
SLS Block 1B
Cancelled SLS upgrade with Exploration Upper Stage, ended February 2026.
SLS Block 2
Cancelled highest-capacity SLS variant, ended February 2026.
SNOW
UNC6692's modular malware ecosystem; SNOWBELT browser backdoor, SNOWGLAZE tunneller, SNOWBASIN RCE server.
SodinokibiSodinokibi (also known as REvil) is a ransomware-as-a-service family responsible for multiple high-profile attacks, delivered here via exploited WebLogic T3/IIOP channels.
SOHOESA/NASA solar observatory at L1; imagery feeds Artemis II radiation storm forecasting.
'Sorry' ransomware
Novel ransomware deploying Go-based Linux encryptors on compromised cPanel hosts since early 2026.
Space-Based Interceptor
Anti-missile interceptor designed for boost-phase intercept outside the atmosphere; central to Golden Dome.
Space Launch SystemNASA's heavy-lift Moon rocket, costing $4 billion per flight.
Space Shuttle OMS Engine
Shuttle-era engine reused in Orion's service module, flying its seventh mission.
StarshipSpaceX's fully reusable super-heavy-lift rocket and the lunar lander for Artemis III/IV.
Starship HLS
SpaceX Human Landing System for Artemis III; two years behind schedule per OIG IG-26-004.
STINGUkrainian interceptor drone; destroyed two Shahed-type targets at 500 km range on 4 April 2026.
STIR/SHAKENCaller ID authentication framework US voice carriers must deploy against spoofing.
Storm Shadow
Anglo-French cruise missile supplying Ukraine with deep-strike precision capability against Russia.
SystemBCModular C2 framework and SOCKS5 proxy used by ransomware groups for covert infrastructure.
TDRSNASA relay satellite network linking spacecraft to Mission Control.
Telegram
Cloud messaging platform; key channel for war reporting, dissident communication, and state censorship battles.
Tomahawk cruise missile
Raytheon-built long-range subsonic cruise missile, launched from US, British, Japanese and Australian warships.
Trillium HD45LP
High-definition optical sensor suite for Anduril Ghost-X reconnaissance drones.
TRON
Blockchain network dominant for USDT stablecoin transfers; two Iran central bank wallets listed by OFAC 24 April.
Truth Social
Trump's social media platform; the de facto policy announcement channel with zero signed executive follow-through.
TSAM
Thales's towed synthetic-aperture sonar, fitted to the Royal Navy's autonomous minehunter RNMB Ariadne.
Type 45
Royal Navy's six-ship air-defence destroyer class; one deployed to Gulf amid Hormuz crisis.
Type-75 MLRS
North Korean 107mm multiple-launch rocket system based on China's Type-63; first deployed on Russian unmanned ground vehicles near Kharkiv in June 2026.
UAVs
Unmanned aerial vehicles; Iran's primary strike weapon, now countered by fibre-optic variants that defeat jamming
UGV
Unmanned ground vehicle: a crewless robotic platform able to carry weapons systems remotely.