Threat actor
UNC1549
Tracked by CyberSIXT since May 22, 2026 · last activity May 26, 2026
Coverage timeline
-
Iranian APT Nimbus Manticore Shifts Focus to US Aviation Softwarewww.securityweek.com · May 26, 2026
-
Nimbus Manticore hackers hit US aviation via fake Oracle SQL pagewww.infosecurity-magazine.com · May 26, 2026
-
Iranian hackers use AI malware, SEO tricks in US aviation attackssecurityaffairs.com · May 26, 2026
-
Iranian hackers revive with SEO poison, fake Zoom and AI backdoorresearch.checkpoint.com · May 22, 2026