Termite has reportedly been active since April 2024. The group claimed to be behind the November 2024 ransomware attack on supply chain management firm Blue Yonder, which impacted the operations of Starbucks and a number of major UK supermarkets. It has also claimed attacks against organizations in critical sectors, including government agencies, oil and gas and automotive manufacturing. An analysis by threat intelligence firm Cyble assessed that Termite is essentially a rebranding of the notorious Babuk ransomware.