Tag: pollblend

1 Attack Reports | 0 Vulnerabilities

Attack reports

Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting the Aerospace and Defense Ecosystem

UNC1549, an Iranian-linked threat group, has been targeting aerospace, aviation, and defense industries since mid-2024. They employ sophisticated initial access techniques, including exploiting third-party relationships and targeted phishing. The group uses custom malware like TWOSTROKE, LIGHTRAIL,…

lateral movement

privilege escalation

third-party compromise

Published: November 18, 2025

Downloadable IOCs: 16

Click here to see more Attack Reports