Introduction
These are reported APT activities attributed to a country, but not to an individual threat group.
Activities and Tactics
Country of Origin: 🇮🇷 [“Iran”]
Notable Campaigns
- 2017
- 2023-11
- 2023-12
- Florida water agency latest to confirm cyber incident as feds warn of nation-state attacks
- I Spy With My Little Eye: Uncovering an Iranian Counterintelligence Operation
- North Texas water utility serving 2 million hit with cyberattack
- Pennsylvania water authority hit with cyberattack allegedly tied to pro-Iran group
- https://cloud.google.com/blog/topics/threat-intelligence/uncovering-iranian-counterintelligence-operation
- https://therecord.media/florida-water-agency-ransomware-cisa-warning-utilities
- https://therecord.media/north-texas-water-utility-cyberattack
- https://therecord.media/water-authority-pennsylvania-cyberattack-pro-iran-group
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
Information pending cataloguing.
Attribution and Evidence
Country of Origin: [“Iran”] Additional attribution information pending cataloguing.
References
References pending cataloguing.