Telecom & ICT

CRITICALCorrelated

Telecommunications and ICT infrastructure.

Threat level basis: 2 tracked actors (severity-weighted score 5)

Actors targeting this sector (2)

OilRigIran (state-aligned)Critical
MuddyWaterIran (MOIS-linked)High

Observed techniques (15)

T1566 Phishing T1059.001 PowerShell T1071.004 DNS (C2)T1572 Protocol Tunneling T1505.003 Web Shell T1078 Valid Accounts T1003 OS Credential Dumping T1114 Email Collection T1048 Exfiltration Over Alternative Protocol T1219 Remote Access Software T1053 Scheduled Task/Job T1027 Obfuscated Files or Information T1105 Ingress Tool Transfer T1071.001 Web Protocols (C2)T1110.003 Password Spraying

Defender guidance

Prioritize the techniques above in detection engineering, and cross-reference the affected products of any exploited CVEs in the CVE Intelligence Center against your telecom & ict estate. Benchmark controls with the posture assessment, and generate detections from any technique with the rule generator.

← All sectors