[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkFLDZxkjuXGXt7WkGjyJGUz0Ulz-WVPp0bIoGlrFUlg":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":11,"target_industries":12,"target_countries":15,"incident_types":20,"references":22,"techniques":29,"technique_count":30,"created_at":31,"seoMetadata":32,"schemaOrg":36},"Madi","madi",[],"Kaspersky Lab and Seculert worked together to sinkhole the Madi Command & Control (C&C) servers to monitor the campaign. Kaspersky Lab and Seculert identified more than 800 victims located in Iran, Israel and select countries across the globe connecting to the C&Cs over the past eight months. Statistics from the sinkhole revealed that the victims were primarily business people working on Iranian and Israeli critical infrastructure projects, Israeli financial institutions, Middle Eastern engineering students, and various government agencies communicating in the Middle East.\nCommon applications and websites that were spied on include accounts on Gmail, Hotmail, Yahoo! Mail, ICQ, Skype, Google+, and Facebook. Surveillance is also performed over integrated ERP\u002FCRM systems, business contracts, and financial management systems.","IR","Iran (Islamic Republic of)",[13,14],"Government","Private sector",[16,17,18,19],"Iran","Pakistan","Israel","United States",[21],"Espionage",[23,24,25,26,27,28],"https:\u002F\u002Fsecurelist.com\u002Fthe-madi-campaign-part-i-5\u002F33693\u002F","https:\u002F\u002Fsecurelist.com\u002Fthe-madi-campaign-part-ii-53\u002F33701\u002F","https:\u002F\u002Fwww.cfr.org\u002Finteractive\u002Fcyber-operations\u002Fmadi","https:\u002F\u002Fwww.kaspersky.com\u002Fabout\u002Fpress-releases\u002F2012_kaspersky-lab-and-seculert-announce--madi--a-newly-discovered-cyber-espionage-campaign-in-the-middle-east","https:\u002F\u002Fthreatpost.com\u002Fnew-and-improved-madi-spyware-campaign-continues-072512\u002F76849\u002F","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20120718173322\u002Fhttps:\u002F\u002Fwww.symantec.com\u002Fconnect\u002Fblogs\u002Fmadi-attacks-series-social-engineering-campaigns",[],0,"2023-08-09T17:25:09.409843+00:00",{"title":33,"metaDescription":34,"keywords":35},"Madi Threat Actor Profile | Precursor Intelligence","Kaspersky Lab and Seculert worked together to sinkhole the Madi Command & Control (C&C) servers to monitor the campaign. Kaspersky Lab and Seculert id...","Madi, threat actor, APT, cyber threat, threat intelligence, Government, Private sector, Iran (Islamic Republic of), IR",{"@context":37,"@type":38,"name":6,"alternateName":39,"description":9,"url":40,"mainEntityOfPage":41,"location":43},"https:\u002F\u002Fschema.org","Organization",[],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fmadi",{"@type":42,"@id":40},"WebPage",{"@type":44,"name":10},"Country"]