A threat actor using Iranian-language tools, Iranian hosting companies, operating from the Iranian IP space at times was observed targeting the Syrian...
Actor Overview
Known Techniques
7 TTPs
MITRE ATT&CK Techniques
T1070T1070.004T1056T1056.001T1027T1027.013T1113
Related Threat Reports
PremiumAPT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated
Get alerts when new intel on Group5 is published.
Actor Details
Primary Name
Group5
Known Aliases
G0043
Data Source
Precursor Intelligence