Threat actor
Smoke Sandstorm
Iran
Tracked by CyberSIXT since 28 Jul
- Articles · all time
- 2
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
7 articles from 1 outlet since 22 Sep 2025; the latest 49 days ago.
- Article
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 7 Sep · 10:49 UTC | SecurityOnline | Mirage Kitten Targets Developers With Dual Backdoors in Coding Tests |
| Tue 28 Jul · 12:51 UTC | The Hacker News | NightLedger Malware Hijacks Victim PCs as Covert Espionage Relays |
| Tue 28 Jul · 08:31 UTC | Securelist | Mirage Kitten APT Deploys NightLedger on Aerospace & Telecom |
| Tue 18 Nov 2025 · 22:26 UTC | Dark Reading | Iran-Nexus Threat Actor UNC1549 Takes Aim at Aerospace |
| Wed 24 Sep 2025 · 01:16 UTC | SecurityOnline | Iranian APT “Nimbus Manticore” Intensifies Cyber Espionage in Europe |
| Tue 23 Sep 2025 · 08:13 UTC | GBHackers | Nimbus Manticore Targets Defense and Telecom Industries with New Malware Attack |
| Mon 22 Sep 2025 · 13:05 UTC | Check Point | Nimbus Manticore Deploys New Malware Targeting Europe |
Names and sources
- Bohrium
- Named by CyberSIXT coverage
- Bohrium
- Named by Malpedia · bohrium
- IMPERIAL KITTEN
- Named by Malpedia · bohrium
- Smoke Sandstorm
- Named by Malpedia · bohrium
- Bohrium
- Named by MISP Galaxy · 111efc97-6a93-487b-8cb3-1e890ac51066
- IMPERIAL KITTEN
- Named by MISP Galaxy · 111efc97-6a93-487b-8cb3-1e890ac51066
- Smoke Sandstorm
- Named by MISP Galaxy · 111efc97-6a93-487b-8cb3-1e890ac51066
- 111efc97-6a93-487b-8cb3-1e890ac51066
- Named by CyberSIXT coverage
Attributed facts
- origin
- Iran (MISP Galaxy · 111efc97-6a93-487b-8cb3-1e890ac51066)
- Mirage Kitten Targets Developers With Dual Backdoors in Coding TestsSecurityOnline
- NightLedger Malware Hijacks Victim PCs as Covert Espionage RelaysThe Hacker News
- Mirage Kitten APT Deploys NightLedger on Aerospace & TelecomSecurelist
- Iran-Nexus Threat Actor UNC1549 Takes Aim at AerospaceDark Reading
- Iranian APT “Nimbus Manticore” Intensifies Cyber Espionage in EuropeSecurityOnline
- Nimbus Manticore Targets Defense and Telecom Industries with New Malware AttackGBHackers
- Nimbus Manticore Deploys New Malware Targeting EuropeCheck Point · first in our coverage