Multiple #Iran cyber actors behind mid-July #cyberattack on #Albania, per @Microsoft Security Threat Intelligence
"Microsoft assessed with high confidence that multiple Iranian actors participated in this attack—with different actors responsible for distinct phases"
"Microsoft assessed with high confidence that multiple Iranian actors participated in this attack—with different actors responsible for distinct phases"
Per @Microsoft:
- DEV-0842 deployed the ransomware and wiper malware
- DEV-0861 gained initial access and exfiltrated data
- DEV-0166 exfiltrated data
- DEV-0133 probed victim infrastructure
#Iran-#Albania
- DEV-0842 deployed the ransomware and wiper malware
- DEV-0861 gained initial access and exfiltrated data
- DEV-0166 exfiltrated data
- DEV-0133 probed victim infrastructure
#Iran-#Albania
"The actors involved in gaining initial access and exfiltrating data in the attack are linked to EUROPIUM, which has been publicly linked to #Iran’s Ministry of Intelligence and Security (MOIS)" per @Microsoft
Investigation also finds during the destructive cyberattack on gvt websites/public services, "a separate #Iran|ian state-sponsored actor leaked sensitive information that had been exfiltrated months earlier" per @Microsoft
• • •
Missing some Tweet in this thread? You can try to
force a refresh
