Trusted Design

CURIUM

G1012 · MITRE Pageへのリンク

脅威アクターの詳細

[CURIUM](https://attack.mitre.org/groups/G1012) is an Iranian threat group, first reported in September 2019 and active since at least July 2018, targeting IT service providers in the Middle East.(Citation: Symantec Tortoiseshell 2019) [CURIUM](https://attack.mitre.org/groups/G1012) has since invested in building relationships with potential targets via social media over a period of months to establish trust and confidence before sending malware. Security researchers note [CURIUM](https://attack.mitre.org/groups/G1012) has demonstrated great patience and persistence by chatting with potential targets daily and sending benign files to help lower their security consciousness.(Citation: Microsoft Iranian Threat Actor Trends November 2021)

別名・別称

CURIUM
Crimson Sandstorm
TA456
Tortoise Shell
Yellow Liderc

利用した攻撃手法

関連するCVE (攻撃手法に関連)

Actor – Pulse グラフ


← 脅威アクター一覧に戻る