UNC1549
0 incidentes
0 paises
0 sectores
apt IR Ultimo: -
Aliases: oficiales para este grupo, asociados al grupo
UNC1549 is an Iranian state-sponsored cyber espionage group active since at least June 2022, strongly linked to Iran's Islamic Revolutionary Guard Corps (IRGC). This group is also tracked under numerous aliases including Smoke Sandstorm, Tortoiseshell, TA455, Imperial Kitten, Nimbus Manticore, Subtle Snail, GalaxyGato, Screening Serpens, and Iranian Dream Job. Their primary motivation is intelligence collection, intellectual property theft, and establishing long-term access for strategic espionage objectives. UNC1549 distinguishes itself by anticipating investigators, prioritizing long-term persistence in compromised environments, and extensively abusing trusted third-party relationships for initial access into high-value targets.