ctrlINT What the industry said about every indicator, with the quote

Shahid HemmatThreat actor

Shahid Hemmat is an IRGC-CEC affiliated hacking group linked to cyberattacks targeting U. S. critical infrastructure, including the defense industry and international transportation sectors. The group has been implicated in the hack of a booster station at the Municipal Water Authority in Aliquippa, Pennsylvania, which disrupted drinking water supply.From MISP Galaxy

Last reported 1 month ago, by Risky Business News1 report

Suspected originIranMISP Galaxy

ATT&CK techniques

1 technique · each with the sentence it comes from
  1. T1684Social Engineering

    “Phantom Deal profile: Gen Digital has stumbled upon a cybercrime group that poses as executives who use WhatsApp social-engineering to trick victims into investing or acquiring fake companies.”

    Risky Business NewsNews

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each
  1. “From his role he directs the activity of multiple Iranian hacking groups, such as the CyberAv3ngers, Shahid Hemmat, and Dadeh Afzar Arman.”

    Risky Business NewsNews
    Risky Bulletin: Russia tells data centers to deploy drone defenses

Indicators in its reports

named in the reports above
Copy these 2 indicators · defanged

Thanks — we review every report.

Report a wrong match
What is wrong with Shahid Hemmat here?
No account needed. We do not store your IP address.