UNC1549 TTPs: Iranian APT Targeting Aerospace and Defense (opens in new tab)

Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Note: Affiliate link – your enrollment helps support this platform at no extra cost to you. Overview UNC1549 is an Iranian-linked cyber-espionage group active since at least June 2022. It targets aerospace, aviation, and defense organizations across the Middle East, South Asia, and Western Europe. The group deploys custom malware, uses fake React-based c...