- Category
- Agency or leak · A state agency’s own unit, or a toolset known from a leak.
- Origin
- Iran(high confidence)
- Sponsor
- State-sponsored
- Motivation
- Information theft and espionage
- Seen
- 2019
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0627 · unnamed-groups-iran
IranWhat it is
These are reported APT activities attributed to a country, but not to an individual threat group.
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
- ETDA / ThaiCERTIran
- ThreatActor.info (Malpedia et al.)Iran
Targets
- Countries
- Afghanistan, Australia, Azerbaijan, Bahrain, Colombia, Dubai, Egypt, Ethiopia, Fiji, Hong Kong, India, Indonesia, Iraq, Israel, Kenya, Kuwait, Kyrgyzstan, Lebanon, Malaysia, Mauritius, Morocco, New Zealand, Oman, Pakistan, Philippines, Qatar, South Africa, Sri Lanka, Syria, Thailand, Türkiye, United Arab Emirates, United States
- Sectors
- Aviation, Government, Industrial, IT, Telecommunications
Sources
- ETDA Threat Group Card apt.etda.or.th