Iran-linked actors target critical infrastructure organizations
Tags
country: Australia Canada Iran
attack-pattern: Data Credentials - T1589.001 Email Accounts - T1585.002 Email Accounts - T1586.002 Multi-Factor Authentication - T1556.006 Password Spraying - T1110.003 Powershell - T1059.001 Remote Desktop Protocol - T1021.001 Tool - T1588.002 Brute Force - T1110 Powershell - T1086 Remote Desktop Protocol - T1076 Valid Accounts - T1078 Valid Accounts
Show in Graph
Common Information
Type Value
UUID 770d585d-c51b-4e09-80cf-2ef29e153d47
Fingerprint a4320e9bdfc7d44d
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 18, 2024, 8:01 p.m.
Added to db Oct. 18, 2024, 10:14 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline UNKNOWN
Title Iran-linked actors target critical infrastructure organizations
Detected Hints/Tags/Attributes 46/2/2
Source URLs
Redirection Url
Details Source https://securityaffairs.com/169960/apt/iran-linked-actors-a-year-long-campaign.html
URL Provider
Details Provider Source level domain
Details securityaffairs.com securityaffairs.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 486 ✔ Security Affairs https://securityaffairs.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 74 
mstsc.exe
Details File 128 
msedge.exe