Mandiant Reports on UNC1549 Espionage Campaigns Targeting Aerospace and Defense

Mandiant Reports on UNC1549 Espionage Campaigns Targeting Aerospace and Defense

First seen 2 Dec 2025, 18:33 UTC •MandiantCloud.GoogleIndustrialcyber.CoFilestore.Fortinet •88% similarity •25.6

Article Content

Browse articles
ThreatCluster

Mandiant has identified a surge in targeted campaigns by the threat group UNC1549, suspected to be linked to Iran, focusing on the aerospace, aviation, and defense sectors in the Middle East. Since mid-2024, these campaigns have employed various tactics, techniques, and procedures (TTPs), including phishing lures to gain initial access to their targets.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →