Aliases
Scarred Manticore, HTTPSnoop
Tags
State-Sponsored
Attribution
🇮🇷/MOIS
References
Last edited
Sep 24, 2024 1:39 PM
Status
Finalized
Cloud-fluent
UNC1860 is an Iranian state-sponsored threat actor, likely affiliated with Iran's Ministry of Intelligence and Security (MOIS). This group specializes in gaining persistent access to high-priority networks, especially in the government and telecommunications sectors in the Middle East. UNC1860 is believed to provide initial access to other actors, facilitating more destructive attacks.