Iranian APT Targets Aviation, Software Companies With Updated Tools
Summary
An Iranian advanced persistent threat (APT) group known as Nimbus Manticore has continued its cyber operations, even following US military actions against Iran. The group is specifically targeting aviation and software companies, employing updated tools in its campaigns.
IFF Assessment
FOE
The continued and updated operations of an APT group targeting critical sectors represent a significant threat to cybersecurity defenders.
Defender Context
This report highlights the persistent threat posed by nation-state actors like Nimbus Manticore. Defenders should remain vigilant for reconnaissance and potential exploitation attempts against aviation and software supply chains, and ensure their threat intelligence feeds are updated with relevant APT activity.