Scarred ManticoreThreat actor
Scarred Manticore has been pursuing high-value targets for years, utilizing a variety of IIS-based backdoors to attack Windows servers. These include a variety of custom web shells, custom DLL backdoors, and driver-based implants.From MISP Galaxy
Last reported 3 months ago, by SentinelLabs1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1195Supply Chain Compromise
“A compromised supplier may expose customer identities and trusted administrative paths, but it’s only a software supply-chain compromise if there is evidence that downstream customers, builds, updates, or distribution were affected.”
- T1684Social Engineering
“Espionage via recruitment-themed social engineering, aligned with IRGC strategic priorities”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Iran War Cyber Threat Landscape | A Midyear Assessment on What Matters“…stice, and Karma as related fronts within a common MOIS-linked system, and Check Point has also documented collaboration involving Scarred Manticore.”
Thanks — we review every report.