🇮🇷

ITG18

APT Group Information theft and espionage ETDA ✓

Also Known As

No alias recorded

Target Countries 20

Countries highlighted in red

United Arab Emirates Afghanistan Australia Azerbaijan Bahrain Germany France United Kingdom Israel India Islamic Republic of Iran Jordan Republic of Korea Kuwait Lebanon Qatar Saudi Arabia Thailand Turkey United States

Sectors Targeted

Finance and Insurance 52 Internet Publishing and Broadcasting and Web Search Portals 51913 National Security and International Affairs 928 Health Care and Social Assistance 62 Computer Systems Design Services 541512 Public Administration 92 Hardware Manufacturing 332510 Telecommunications 517 Human Rights Organizations 813311 Professional, Scientific, and Technical Services 54 Utilities 22 NAICS:48 48 Space Research and Technology 927 Publishing Industries (except Internet) 511 Pharmaceutical Educational Services 61 Defense Aircraft Manufacturing 336411 Religious, Grantmaking, Civic, Professional, and Similar Organizations 813 Government Information 51 Oil and Gas Extraction 211 Chemical Manufacturing 325

Details

Origin 🇮🇷 IR
Last Updated 11 May 2024

Malware Families 7

leash
zhmimikatz
mediapi
disttrack
little_looter
telegram_grabber
syskit

MITRE ATT&CK 111

T1003 T1003.001 T1005 T1016 T1016.001 T1016.002 T1018 T1021 T1021.001 T1027 T1027.010 T1027.013 T1033 T1036 T1036.004 T1036.005 T1036.010 T1046 T1047 T1049 T1053 T1053.005 T1056 T1056.001 T1057 T1059 T1059.001 T1059.003 T1059.005 T1070 T1070.003 T1070.004 T1071 T1071.001 T1078 T1078.001 T1078.002 T1082 T1083 T1087 T1087.003 T1090 T1098 T1098.002 T1098.007 T1102 T1102.002 T1105 T1112 T1113 T1114 T1114.001 T1114.002 T1136 T1136.001 T1189 T1190 T1204 T1204.001 T1204.002 T1213.002 T1218 T1218.011 T1482 T1486 T1505 T1505.003 T1547 T1547.001 T1560 T1560.001 T1562 T1562.001 T1562.002 T1562.004 T1564 T1564.003 T1566 T1566.001 T1566.002 T1566.003 T1567 T1570 T1571 T1572 T1573 T1583 T1583.001 T1583.006 T1584 T1584.001 T1585 T1585.001 T1585.002 T1586 T1586.002 T1588 T1588.002 T1589 T1589.001 T1589.002 T1590 T1590.005 T1591 T1591.001 T1592 T1592.002 T1595 T1595.002 T1598 T1598.003

Related Zero-Days

No zero-day CVE linked to this actor