Mandiant Mandiant Reports on UNC1549 Espionage Campaigns Targeting Aerospace and Defense
Article Content
Browse articles 
Mandiant has identified a surge in targeted campaigns by the threat group UNC1549, suspected to be linked to Iran, focusing on the aerospace, aviation, and defense sectors in the Middle East. Since mid-2024, these campaigns have employed various tactics, techniques, and procedures (TTPs), including phishing lures to gain initial access to their targets.
Ask AI about this cluster
Answers cite the sources they use
Updated 225d ago How this analysis works
More articles in this cluster (5)
Following this threat?
Track UNC1549, Deeproot and Azure in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…