Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
4 matching stories
IranMuddyWater Disguises Espionage Campaign as Chaos Ransomware
MuddyWater used Chaos ransomware branding to mask a state-sponsored espionage operation that included credential theft, data exfiltration, and a leak-site entry, with initial access delivered through Microsoft Teams social engineering.
FortiGuard Labs Flags Handala Exploiting Six Vendor Vulnerabilities in Active Iran Campaign
FortiGuard Labs issued an Outbreak Alert for the Handala group, an Iran-linked actor, actively exploiting critical vulnerabilities across six major vendor products in a sustained campaign.
FortiGuard Labs flags UNC1549 for spear-phishing and VDI abuse against European aerospace and telecom targets
FortiGuard Labs published an Outbreak Alert for UNC1549, a suspected Iran-linked espionage group targeting aerospace, defense, and telecom organizations in Europe with spear-phishing, credential theft, and VDI abuse for initial access and lateral movement.
SentinelOne Refines APT42 Iran War Assessment with Three Months of New Evidence
SentinelOne's midyear assessment of the Iran War cyber threat landscape refines their April initial assessment with three months of evidence on APT42/MOIS, IRGC, and persona activity, including AI-assisted spear phishing and TAMECAT backdoor deployment.
