Risky Biz News: Two Iranian cyber groups get doxed in a week
Tags
country: Australia Belarus Luxembourg Iran Israel Myanmar Poland Russia Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Code Signing Certificates - T1587.002 Code Signing Certificates - T1588.003 Confluence - T1213.001 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Password Managers - T1555.005 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Remote Access Software - T1663 Server - T1583.004 Server - T1584.004 Social Media - T1593.001 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Connection Proxy - T1090 Powershell - T1086 Remote Access Tools - T1219
Show in Graph
Common Information
Type Value
UUID 282ec82b-ac3b-46ed-9f9b-1cf9a353a85e
Fingerprint 840429db9a95f600
Analysis status DONE
Considered CTI value 2
Text language
Published Feb. 5, 2024, midnight
Added to db Aug. 31, 2024, 7:22 a.m.
Last updated Oct. 28, 2024, 3:02 p.m.
Headline !!! Do not subscribe! We have moved!
Title Risky Biz News: Two Iranian cyber groups get doxed in a week
Detected Hints/Tags/Attributes 140/3/4
Source URLs
Redirection Url
Details Source https://riskybiznews.substack.com/p/two-iranian-cyber-groups-doxed-in-a-week
URL Provider
Details Provider Source level domain
Details substack.com riskybiznews.substack.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 209 ✔ !!! Do not subscribe! We have moved! https://riskybiznews.substack.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 2 
cve-2024-1019
Details CVE 1 
cve-2024-22899
Details CVE 1 
cve-2024-22903
Details Threat Actor Identifier - APT-K 10 
APT-K-47