Threat actor · G1030

Agrius

Pink SandstormAMERICIUMAgonizing SerpensBlackShadow

UnattributedNo public state or group attribution on record

Agrius is an Iranian threat actor active since 2020 notable for a series of ransomware and wiper operations in the Middle East, with an emphasis on Israeli targets. Public reporting has linked Agrius to Iran's Ministry of Intelligence and Security (MOIS).

MITRE ATT&CK Techniques

T1003.001 T1003.002 T1005 T1018 T1021.001 T1036 T1041 T1046 T1059.003 T1074.001 T1078.002 T1110 T1110.003 T1119 T1140 T1190 T1505.003 T1543.003 T1560.001 T1570 T1583 T1685

Associated Malware

ASPXSpyApostleBFG AgonizerDEADWOODIPsec HelperMimikatzMoneybirdMultiLayer WiperNBTscan

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.