🇮🇷

Achilles

APT Group ETDA ✓

Also Known As

No alias recorded

Target Countries 15

Countries highlighted in red

Australia Canada France United Kingdom Greece Israel India Italy Malaysia Nigeria Netherlands Singapore Ukraine United States South Africa

Sectors Targeted

NAICS:48 48 Internet Publishing and Broadcasting and Web Search Portals 51913 including banks and hospitals Retail Education Reinsurance Business Telecommunications 517 Software Publishers 5112 Organizations Military Multiple social media Multiple (Technology FinTech Healthcare Government Communications Gaming) communications Other Services (except Public Administration) 81 Financial Services Ship Building and Repairing 336611 Telecommunications Couriers and Express Delivery Services 4921 Logistics healthcare) Justice, Public Order, and Safety Activities 922 Utilities 22 Critical Infrastructure (construction Various industries Information 51 education Cryptocurrency Information Technology National Security and International Affairs 928 NAICS:44 44 Political Journalism Shipping Religious, Grantmaking, Civic, Professional, and Similar Organizations 813 Commodity Contracts Intermediation 523160 Arts, Entertainment, and Recreation 71 Various (finance Not specified Critical Infrastructure Legal etc.) Educational Services 61 Aircraft Manufacturing 336411 government operations Banking Finance Travel Agencies 561510 Couriers and Express Delivery Services 492110 Public Sector Space Research and Technology 927 energy Hospitality Financial Commercial Banking 52211 hospitality Transportation Computer and Electronic Product Manufacturing 334 Insurance Carriers and Related Activities 524 Health Care and Social Assistance 62 Multiple (Retail Finance and Insurance 52 Energy Technology manufacturing and electric and gas utilities) Multiple sectors Individuals gaming Public Administration 92 Computer Systems Design Services 541512 maritime activity Aerospace

Details

Origin 🇮🇷 IR
Last Updated 18 Apr 2025

Malware Families 1

Windows Remote Desktop

MITRE ATT&CK 4

T1021.001 - Remote Desktop Protocol T1071.001 - Application Layer Protocol T1078 - Valid Accounts T1566.001 - Spearphishing Attachment

Related Zero-Days

No zero-day CVE linked to this actor