threat actor

NIMBUS MANTICORE

activeentity:threat_actor

[NIMBUS MANTICORE](https://attack.mitre.org/groups/G1059) is a State Sponsored cyber espionage group associated with the Iranian Regime specifically the Iranian Revolutionary Guard Corps (IRGC). [NIMBUS MANTICORE](https://attack.mitre.org/groups/G1059) has employed social engineering attacks to include HR related themes and has leveraged custom malware against its victims. [NIMBUS MANTICORE](https://attack.mitre.org/groups/G1059) has sought sensitive information in victims’ environments to i

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: nimbus-manticore
kind: threat actor
status: active
aliases: COBALT SMOKEY · TA455 · UNC1549
jurisdictions: —
claims naming it: 0 · 0 attributions · 13 relations · 0 events

Identifiers

attack G1059via mitre-attack

Relations

MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesCRASHPAD
fetch —sha256 81113ba98afa2928
rel_2804btcintel:relations:2804@v1 sha256:84cdfababd852e15
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesMiniBus
fetch —sha256 81113ba98afa2928
rel_2855btcintel:relations:2855@v1 sha256:48c21a0f3b2a689e
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesDCSYNCER.SLICK
fetch —sha256 81113ba98afa2928
rel_2951btcintel:relations:2951@v1 sha256:52c47e249a2a3840
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesTRUSTTRAP
fetch —sha256 81113ba98afa2928
rel_2956btcintel:relations:2956@v1 sha256:49fb549d3b4dec96
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesTWOSTROKE
fetch —sha256 81113ba98afa2928
rel_3049btcintel:relations:3049@v1 sha256:2fa5894a61342793
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesMiniFast
fetch —sha256 81113ba98afa2928
rel_3070btcintel:relations:3070@v1 sha256:b1eee2830507f23a
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesMiniJunk
fetch —sha256 81113ba98afa2928
rel_3071btcintel:relations:3071@v1 sha256:e4492afd93d536c7
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesLIGHTRAIL
fetch —sha256 81113ba98afa2928
rel_3178btcintel:relations:3178@v1 sha256:6d1745a0c0e72827
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesMiniBrowse
fetch —sha256 81113ba98afa2928
rel_3217btcintel:relations:3217@v1 sha256:b2795c294ef32e19
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesMiniBike
fetch —sha256 81113ba98afa2928
rel_3254btcintel:relations:3254@v1 sha256:29fac4f4fda75498
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesDEEPROOT
fetch —sha256 81113ba98afa2928
rel_3306btcintel:relations:3306@v1 sha256:db39dcadc838e83a
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesSIGHTGRAB
fetch —sha256 81113ba98afa2928
rel_3321btcintel:relations:3321@v1 sha256:6c132c887d2b2e38
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatNIMBUS MANTICOREusesPOLLBLEND
fetch —sha256 81113ba98afa2928
rel_3344btcintel:relations:3344@v1 sha256:f636951ee2013c0c
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.