Trusted Design

Targets Middle Eastern Telecommunications Companies

概要

Targets Middle Eastern Telecommunications Companies esearchers observed additional activity associated with suspected Iran-based Threat Group-2889[1] (TG-2889) that confirms prior analysis of the group's use of LinkedIn to target victims and its interest in Middle Eastern telecommunications companies. CTU(TM) researchers also uncovered the use of a remote access trojan (RAT) called Helminth that has similarities to other tools used by TG-2889. CTU researchers assess with high confidence that TG-2889 is associated with Iranian government-directed cyber operations. Although the observed activity does not appear to target Western organizations, SecureWorks clients should review the group's tactics, techniques, and procedures (TTPs) and implement defenses against these types of attacks.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Targeted Attack Distributes PlugX in Russia (score: 0.71)
• Threat Group-3390 Targets Organizations for Cyberespionage (score: 0.67)
• Operation Molerats: Middle East Cyber Attacks Using Poison Ivy (score: 0.66)
• OilRig Deploys ALMA Communicator – DNS Tunneling Trojan (score: 0.65)
• NetTraveler APT Targets Russian, European Interests (score: 0.64)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る