Sea Turtle
COSMIC WOLFMarbled DustSILICONTeal KurmaUNC1326
This blog post discusses the technical details of a state-sponsored attack manipulating DNS systems. While this incident is limited to targeting primarily national security organizations in the Middle East and North Africa, and we do not want to overstate the consequences of this specific campaign, we are concerned that the success of this operation will lead to actors more broadly attacking the… Fuente: MISP
País atribuido: TR según MISP
Actividad en Jábega · 12 semanas
1 noticias · vista por primera vez el 18 sept 2026 · la última, el 18 sept 2026
Noticias
Técnicas MITRE ATT&CK
Preparación de recursos
T1583Acquire InfrastructureT1583.001DomainsT1583.002DNS ServerT1583.003Virtual Private ServerT1584.002DNS ServerT1588.002Tool 7 reglas SigmaT1588.004Digital CertificatesT1608.003Install Digital Certificate 1 reglas Sigma
Acceso inicial
T1078Valid Accounts 82 reglas SigmaT1078.003Local Accounts 4 reglas SigmaT1133External Remote Services 17 reglas SigmaT1190Exploit Public-Facing Application 40 reglas SigmaT1199Trusted Relationship 1 reglas SigmaT1566Phishing 28 reglas Sigma
Ejecución
Persistencia
Acceso a credenciales
Recopilación
T1074.002Remote Data StagingT1114.001Local Email Collection 1 reglas SigmaT1213.006DatabasesT1560.001Archive via Utility 10 reglas Sigma
Mando y control
Stealth
Defense impairment
Relaciones por coaparición en noticias, no atribución. Fuentes: MISP galaxy, MITRE ATT&CK y SigmaHQ. attack.mitre.org ↗