Tag: minibike

2 Attack Reports | 0 Vulnerabilities

Attack reports

Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting the Aerospace and Defense Ecosystem

UNC1549, an Iranian-linked threat group, has been targeting aerospace, aviation, and defense industries since mid-2024. They employ sophisticated initial access techniques, including exploiting third-party relationships and targeted phishing. The group uses custom malware like TWOSTROKE, LIGHTRAIL,…

lateral movement

privilege escalation

third-party compromise

Published: November 18, 2025

Downloadable IOCs: 16

Crossed wires: a case study of Iranian espionage and attribution

This analysis examines a newly identified threat actor dubbed UNK_SmudgedSerpent that targeted academics and foreign policy experts between June and August 2025. The actor used domestic political lures related to Iran, benign conversation starters, health-themed infrastructure, and Remote Managemen…

credential harvesting

iranian threat actor

attribution challenges

overlapping ttps

policy experts targeting

Published: November 5, 2025

Downloadable IOCs: 55

Click here to see more Attack Reports