Defense

CRITICALCorrelated

Defense and military-adjacent organizations.

Threat level basis: 3 tracked actors (severity-weighted score 6)

Actors targeting this sector (3)

MuddyWaterIran (MOIS-linked)High
APT33Iran (state-aligned)High
Lazarus GroupNorth Korea (state-sponsored)High

Observed techniques (14)

T1566 Phishing T1059.001 PowerShell T1219 Remote Access Software T1053 Scheduled Task/Job T1027 Obfuscated Files or Information T1105 Ingress Tool Transfer T1071.001 Web Protocols (C2)T1110.003 Password Spraying T1078 Valid Accounts T1204 User Execution T1485 Data Destruction T1195 Supply Chain Compromise T1041 Exfiltration Over C2 Channel T1486 Data Encrypted for Impact

Defender guidance

Prioritize the techniques above in detection engineering, and cross-reference the affected products of any exploited CVEs in the CVE Intelligence Center against your defense estate. Benchmark controls with the posture assessment, and generate detections from any technique with the rule generator.

← All sectors