Iranian APT group launches destructive attacks in hybrid Azure AD environments
Tags
attack-pattern: Data Cloud Account - T1087.004 Cloud Account - T1136.003 Credentials - T1589.001 Powershell - T1059.001 Remote Desktop Protocol - T1021.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Web Services - T1583.006 Web Services - T1584.006 Vulnerabilities - T1588.006 Powershell - T1086 Remote Access Tools - T1219 Remote Desktop Protocol - T1076 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID a3794ec5-cd33-44b0-9694-079d525a8032
Fingerprint ad3ac4194ac16741
Analysis status DONE
Considered CTI value 1
Text language
Published April 11, 2023, midnight
Added to db April 11, 2023, 8:18 p.m.
Last updated Oct. 1, 2024, 1:08 p.m.
Headline Iranian APT group launches destructive attacks in hybrid Azure AD environments
Title Iranian APT group launches destructive attacks in hybrid Azure AD environments
Detected Hints/Tags/Attributes 52/1/1
Source URLs
Redirection Url
Details Source https://www.csoonline.com/article/3692918/iranian-apt-group-launches-destructive-attacks-in-hybrid-azure-ad-environments.html#tk.rss_news
URL Provider
Details Provider Source level domain
Details csoonline.com www.csoonline.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 162 ✔ — https://media.cert.europa.eu/rss?type=category&id=APTFilter&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 25 
DEV-1084