Related Threat Clusters
-
Iranian Hackers Target US Aviation with New Malware and SEO Poisoning
Iranian state-aligned hackers, known as Nimbus Manticore (UNC1549), have intensified cyberattacks against the US aviation sector amid the ongoing US-Iran military conflict. Utilizing career-themed phishing and a novel…
6 articles · Updated May 26, 2026 -
Cloud Attacks Shift Focus to Exploiting Software Vulnerabilities
Hackers are increasingly targeting newly disclosed vulnerabilities in third-party software to access cloud environments, with the time frame for such attacks decreasing significantly. Google reports a notable decline in…
1 article · Updated March 9, 2026 -
UNC1549 Espionage Campaign Targets Aerospace and Defense Sectors
Since mid-2024, the threat group UNC1549 has conducted targeted cyber campaigns against the aerospace, aviation, and defense industries, particularly focusing on entities in the Middle East. Mandiant has documented…
3 articles · Updated November 17, 2025 -
Mandiant Reports on UNC1549 Espionage Campaigns Targeting Aerospace and Defense
Mandiant has identified a surge in targeted campaigns by the threat group UNC1549, suspected to be linked to Iran, focusing on the aerospace, aviation, and defense sectors in the Middle East. Since mid-2024, these…
5 articles · Updated November 21, 2025
Recent Intelligence Reports
- Iranian APT Group Targets Aviation and Software Firms with Updated Tools — Eplaneai · May 26, 2026
- Google: Cloud attacks exploit flaws more than weak credentials — Bleepingcomputer · March 9, 2026
- UNC1549 Critical Infrastructure Espionage Attack — Filestore.Fortinet · December 2, 2025
- Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting ... — Cloud.Google · November 17, 2025
- Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting the Aerospace and Defense Ecosystem — Mandiant · November 17, 2025