Cleaver
Operation CleaverOp CleaverTarh AndishanAlibabaTG-2889Cobalt GypsyG0003Threat Group 2889
A group of cyber actors utilizing infrastructure located in Iran have been conducting computer network exploitation activity against public and private U.S. organizations, including Cleared Defense Contractors (CDCs), academic institutions, and energy sector companies. This threat actor targets entities in the government, energy, and technology sectors that are located in or do business with… Fuente: MISP
País atribuido: IR según MISP
Actividad en Jábega · 12 semanas
1 noticias · vista por primera vez el 11 nov 2026 · la última, el 11 nov 2026
Noticias
- Hackers use AntiFox AI agents in AWS credential-theft attacksBleepingComputer · 11 nov 2026
Técnicas MITRE ATT&CK
Preparación de recursos
Acceso a credenciales
Relaciones por coaparición en noticias, no atribución. Fuentes: MISP galaxy, MITRE ATT&CK y SigmaHQ. attack.mitre.org ↗