Affiliations
- Believed to be connected to the Iranian government.
This threat actor, operating since November 2014, focuses on the Middle East. It mainly targets the telecommunications industry, and also targets the travel industry and supporting IT firms, and the high-tech industry.
Suspected victims
- Saudi Arabia
- Iraq
- Australia
- Egypt
- Spain
- South Korea
- Turkey
- Norway
Suspected state sponsor
- Iran (Islamic Republic of)
Target category
- Government
- Private sector