Iranian Advanced Persistent Threat Actors Threaten Election-Related Systems | CISA
Tags
attack-pattern: Data Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Email Accounts - T1585.002 Email Accounts - T1586.002 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Social Media - T1593.001 Software - T1592.002 Web Shell - T1505.003 Tool - T1588.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002 Remote Desktop Protocol - T1076 Scripting - T1064 Web Shell - T1100 Denial Of Service Scripting
Show in Graph
Common Information
Type Value
UUID a094efac-bc5a-4fc3-b48a-63daf44dbbcd
Fingerprint e5b0891f0f71f661
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 22, 2020, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 18, 2024, 9:29 a.m.
Headline Alert (AA20-296B)
Title Iranian Advanced Persistent Threat Actors Threaten Election-Related Systems | CISA
Detected Hints/Tags/Attributes 86/1/11
Source URLs
Redirection Url
Details Source https://us-cert.cisa.gov/ncas/alerts/aa20-296b
URL Provider
Details Provider Source level domain
Details cisa.gov us-cert.cisa.gov
Attributes
Details Type #Events CTI Value
Details CVE 77 
cve-2020-5902
Details CVE 12 
cve-2017-9248
Details Domain 398 
asp.net
Details Domain 318 
bit.ly
Details Domain 55 
cisa.dhs.gov
Details Domain 7 
ic.fbi.gov
Details Domain 128 
www.fbi.gov
Details Domain 56 
fbi.gov
Details Email 10 
central@cisa.dhs.gov
Details Email 4 
cywatch@ic.fbi.gov
Details Email 29 
cywatch@fbi.gov