APT33
HOLMIUMElfinPeach Sandstorm
IranAssessed Iranian state-sponsored (industry and government reporting)
APT33 is a suspected Iranian threat group that has carried out operations since at least 2013. The group has targeted organizations across multiple industries in the United States, Saudi Arabia, and South Korea, with a particular interest in the aviation and energy sectors.
MITRE ATT&CK Techniques
Associated Malware
AutoIt backdoorDEADWOODEmpireLaZagneMimikatzNETWIRENanoCoreNetPOWERTONPoshC2PowerSploitPupyRulerStoneDrillTURNEDUPftp
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.