APT42

    IranState-sponsoredUnknown

    Observation period

    33

    Techniques

    0

    Reports

    Latest observed activity
    No dated reports available
    First observed
    —

    Profile

    Iranian state-sponsored cyber espionage group tasked with conducting information collection and surveillance operations against individuals and organizations of strategic interest to the Iranian government.

    Relevance for Germany, Austria and Switzerland

    medium

    Assessment based on target countries according to MISP Galaxy (CFR Cyber Operations Tracker).

    Target sectors according to source

    • Education
    • Government
    • Military
    • Defense
    • Energy
    • Finance
    • Healthcare
    • Pharmaceuticals
    • Civil Society
    • Legal
    • Manufacturing
    • Media
    • NGOs

    Target countries according to source Australia, Europe, Israel, Middle East, United States

    Aliases

    • UNC788
    • CALANQUE
    • CALANQUE ION

    MITRE ATT&CK techniques

    Observed techniques per ATT&CK Enterprise and ICS. Each technique links to the ATT&CK knowledge base.

    Software / tooling used

    External references

    Back to group overview