IRIran (Islamic Republic of)confidence: 50

APT42APT42

Also known as: UNC788 · CALANQUE · APT42

Origin
IR
Known aliases
3
Target sectors
14
Attribution
State-sponsored

Profile

Iranian state-sponsored cyber espionage group tasked with conducting information collection and surveillance operations against individuals and organizations of strategic interest to the Iranian government.

Aliases· 3

UNC788CALANQUEAPT42

Target sectors· 14

EducationGovernmentMilitaryDefenseEnergyFinanceHealthcarePharmaceuticalsCivil SocietyLegalManufacturingMediaNGOsPharmaceuticals

Known victims· 5

  • Australia
  • Europe
  • Israel
  • Middle East
  • United States

References

  1. https://www.mandiant.com/resources/blog/apt42-charms-cons-compromises
  2. https://services.google.com/fh/files/misc/tool-of-first-resort-israel-hamas-war-cyber.pdf

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
APT43
Actor
APT41
Actor
APT45
Actor
APT33
Group
APT39
Actor
APT35
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.