Cyber threats / Threat actors

APT42

IR Suspected sponsor: Iran · ATT&CK G1044
1
APAC targets
33
Techniques
0
Incidents
0
News · 30d
Profile
Also known as: CALANQUE, CALANQUE ION, UNC788

Iranian state-sponsored cyber espionage group tasked with conducting information collection and surveillance operations against individuals and organizations of strategic interest to the Iranian government.

ATT&CK techniques · 33
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Stealth
Credential Access
Discovery
Collection
Command and Control
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
Targets
Elsewhere: Israel, United States
Sectors: Civil Society, Defense, Education, Energy, Finance, Government, Healthcare, Legal, Manufacturing, Media, Military, NGOs, Pharmaceuticals
Relevance to the EU
EU relevance: Medium
Targets defense in Australia, where the EU has Peace & Security projects; 2 more such overlaps
7 EU cooperation projects in the Asia-Pacific countries this actor targets:
Research & Innovation
2
Trade & Investment
1
Peace & Security
1
Critical Raw Materials
1
Education & Skills
1
Development Cooperation
1
Threats to the EU →
References
Sources: MISP, MITRE