MITRE ATT&CKcampaign
C0010 C0010
- Domain
- enterprise
- Version
- 1.0
- Created
- 2022-09-21
Description
C0010 was a cyber espionage campaign conducted by UNC3890 that targeted Israeli shipping, government, aviation, energy, and healthcare organizations. Security researcher assess UNC3890 conducts operations in support of Iranian interests, and noted several limited technical connections to Iran, including PDB strings and Farsi language artifacts. C0010 began by at least late 2020, and was still ongoing as of mid-2022.
Related
Uses · MITRE ATT&CK (11)
- S1049 SUGARUSH software (malware)
- S1042 SUGARDUMP software (malware)
- T1608.001 Upload Malware sub-technique
- T1608.002 Upload Tool sub-technique
- T1608.004 Drive-by Target sub-technique
- T1584.001 Domains sub-technique
- T1587.001 Malware sub-technique
- T1588.002 Tool sub-technique
- T1583.001 Domains sub-technique
- T1189 Drive-by Compromise technique
- T1105 Ingress Tool Transfer technique
References
- https://www.mandiant.com/resources/blog/suspected-iranian-actor-targeting-israeli-shipping Mandiant UNC3890 Aug 2022