VOID MANTICORE
Also reported as Red Sandstorm, BANISHED KITTEN, Void Manticore, Storm-0842, HomeLand Justice and 8 other names. Linked to Iran by four sources.
Reports per quarter
Techniques seen in the last two years
- T1021.001 4 reports in ATT&CK
- T1112 4 reports reports only
- T1134 4 reports reports only
- T1489 4 reports reports only
- T1543.003 4 reports reports only
- T1003.001 3 reports in ATT&CK
- T1007 3 reports reports only
- T1012 3 reports reports only
- T1027 3 reports reports only
- T1033 3 reports reports only
Show all 245 techniques Show fewer
- T1046 3 reports reports only
- T1047 3 reports in ATT&CK
- T1055 3 reports reports only
- T1057 3 reports reports only
- T1070.004 3 reports reports only
- T1082 3 reports in ATT&CK
- T1083 3 reports reports only
- T1087 3 reports reports only
- T1105 3 reports in ATT&CK
- T1113 3 reports in ATT&CK
- T1485 3 reports in ATT&CK
- T1486 3 reports in ATT&CK
- T1490 3 reports in ATT&CK
- T1497.001 3 reports reports only
- T1518 3 reports reports only
- T1569.002 3 reports reports only
- T1622 3 reports reports only
- T1003.002 2 reports reports only
- T1021 2 reports reports only
- T1041 2 reports in ATT&CK
- T1053.005 2 reports reports only
- T1059 2 reports reports only
- T1059.001 2 reports in ATT&CK
- T1070.006 2 reports reports only
- T1087.002 2 reports in ATT&CK
- T1098 2 reports in ATT&CK
- T1133 2 reports in ATT&CK
- T1190 2 reports in ATT&CK
- T1199 2 reports in ATT&CK
- T1484.001 2 reports in ATT&CK
- T1505.003 2 reports reports only
- T1547.001 2 reports in ATT&CK
- T1572 2 reports in ATT&CK
- T0835 1 report reports only
- T1005 1 report in ATT&CK
- T1008 1 report reports only
- T1010 1 report reports only
- T1016 1 report reports only
- T1016.001 1 report reports only
- T1018 1 report reports only
- T1020 1 report reports only
- T1021.002 1 report reports only
- T1021.004 1 report reports only
- T1021.005 1 report reports only
- T1021.006 1 report reports only
- T1037 1 report reports only
- T1037.001 1 report reports only
- T1037.003 1 report reports only
- T1039 1 report reports only
- T1040 1 report reports only
- T1048.003 1 report reports only
- T1049 1 report reports only
- T1053 1 report reports only
- T1053.003 1 report reports only
- T1055.001 1 report reports only
- T1055.002 1 report reports only
- T1055.003 1 report reports only
- T1055.004 1 report reports only
- T1055.009 1 report reports only
- T1055.012 1 report reports only
- T1056 1 report reports only
- T1056.001 1 report reports only
- T1059.002 1 report reports only
- T1059.003 1 report reports only
- T1059.004 1 report reports only
- T1059.005 1 report reports only
- T1059.006 1 report in ATT&CK
- T1059.007 1 report reports only
- T1059.009 1 report reports only
- T1059.010 1 report reports only
- T1059.011 1 report reports only
- T1068 1 report reports only
- T1069 1 report reports only
- T1069.001 1 report reports only
- T1069.002 1 report reports only
- T1069.003 1 report reports only
- T1070 1 report reports only
- T1071 1 report reports only
- T1071.001 1 report in ATT&CK
- T1071.004 1 report reports only
- T1072 1 report in ATT&CK
- T1074 1 report in ATT&CK
- T1074.001 1 report reports only
- T1074.002 1 report reports only
- T1078 1 report in ATT&CK
- T1078.002 1 report in ATT&CK
- T1078.004 1 report in ATT&CK
- T1087.001 1 report reports only
- T1087.004 1 report reports only
- T1090 1 report reports only
- T1090.001 1 report reports only
- T1090.003 1 report reports only
- T1091 1 report reports only
- T1095 1 report reports only
- T1098.001 1 report reports only
- T1098.003 1 report reports only
- T1098.004 1 report reports only
- T1098.005 1 report reports only
- T1098.006 1 report reports only
- T1098.007 1 report reports only
- T1102 1 report in ATT&CK
- T1102.002 1 report reports only
- T1104 1 report reports only
- T1110 1 report in ATT&CK
- T1114 1 report reports only
- T1114.001 1 report reports only
- T1114.002 1 report in ATT&CK
- T1114.003 1 report reports only
- T1115 1 report reports only
- T1119 1 report in ATT&CK
- T1120 1 report reports only
- T1123 1 report in ATT&CK
- T1124 1 report reports only
- T1125 1 report in ATT&CK
- T1129 1 report reports only
- T1132 1 report reports only
- T1132.001 1 report reports only
- T1134.001 1 report reports only
- T1135 1 report reports only
- T1136 1 report reports only
- T1136.001 1 report reports only
- T1136.002 1 report reports only
- T1137 1 report reports only
- T1137.006 1 report reports only
- T1140 1 report reports only
- T1189 1 report reports only
- T1195 1 report reports only
- T1195.002 1 report reports only
- T1200 1 report reports only
- T1201 1 report reports only
- T1203 1 report reports only
- T1204 1 report reports only
- T1204.001 1 report reports only
- T1204.002 1 report in ATT&CK
- T1210 1 report reports only
- T1213 1 report reports only
- T1213.001 1 report reports only
- T1213.002 1 report in ATT&CK
- T1213.003 1 report reports only
- T1217 1 report reports only
- T1218.011 1 report reports only
- T1219 1 report reports only
- T1482 1 report reports only
- T1484 1 report reports only
- T1491.002 1 report reports only
- T1496 1 report reports only
- T1497 1 report reports only
- T1505 1 report reports only
- T1505.004 1 report reports only
- T1518.001 1 report reports only
- T1529 1 report reports only
- T1530 1 report reports only
- T1534 1 report reports only
- T1537 1 report reports only
- T1538 1 report reports only
- T1543 1 report reports only
- T1543.002 1 report reports only
- T1543.004 1 report reports only
- T1546 1 report reports only
- T1546.003 1 report reports only
- T1546.004 1 report reports only
- T1546.008 1 report reports only
- T1546.012 1 report reports only
- T1546.015 1 report reports only
- T1547 1 report reports only
- T1547.002 1 report reports only
- T1547.005 1 report reports only
- T1547.009 1 report reports only
- T1548 1 report reports only
- T1548.002 1 report reports only
- T1550 1 report reports only
- T1550.001 1 report reports only
- T1550.002 1 report reports only
- T1554 1 report reports only
- T1556 1 report reports only
- T1556.006 1 report reports only
- T1556.009 1 report reports only
- T1559 1 report reports only
- T1560 1 report reports only
- T1560.001 1 report in ATT&CK
- T1560.002 1 report reports only
- T1561.002 1 report in ATT&CK
- T1565 1 report reports only
- T1565.001 1 report reports only
- T1566 1 report in ATT&CK
- T1566.001 1 report reports only
- T1566.002 1 report reports only
- T1566.003 1 report reports only
- T1566.004 1 report reports only
- T1567 1 report reports only
- T1567.001 1 report reports only
- T1567.002 1 report reports only
- T1569 1 report reports only
- T1570 1 report reports only
- T1571 1 report reports only
- T1573 1 report reports only
- T1573.001 1 report reports only
- T1573.002 1 report reports only
- T1574 1 report reports only
- T1574.001 1 report reports only
- T1574.011 1 report reports only
- T1578 1 report reports only
- T1580 1 report reports only
- T1583 1 report reports only
- T1583.003 1 report in ATT&CK
- T1584 1 report reports only
- T1585 1 report reports only
- T1585.002 1 report in ATT&CK
- T1587 1 report reports only
- T1587.003 1 report reports only
- T1588 1 report reports only
- T1588.003 1 report reports only
- T1588.004 1 report reports only
- T1588.007 1 report reports only
- T1595 1 report reports only
- T1595.002 1 report in ATT&CK
- T1598 1 report reports only
- T1602 1 report reports only
- T1602.001 1 report reports only
- T1602.002 1 report reports only
- T1608 1 report reports only
- T1608.001 1 report reports only
- T1608.002 1 report reports only
- T1608.003 1 report reports only
- T1608.004 1 report reports only
- T1608.005 1 report reports only
- T1608.006 1 report reports only
- T1613 1 report reports only
- T1614 1 report reports only
- T1614.001 1 report reports only
- T1615 1 report reports only
- T1619 1 report reports only
- T1652 1 report reports only
- T1654 1 report reports only
- T1657 1 report in ATT&CK
Counts come from technique IDs in the actor's report text. “Reports only” means reports name the technique but MITRE ATT&CK® does not list it for this actor.
Also listed by ATT&CK
CVEs named in reports
- CVE-2017-7921 KEV
- CVE-2019-0604 KEV ransomware
- CVE-2020-3529
- CVE-2021-26855 KEV ransomware
- CVE-2023-22518 KEV ransomware
- CVE-2023-23397 KEV
- CVE-2023-27532 KEV ransomware
- CVE-2023-36033 KEV
- CVE-2023-38831 KEV ransomware
- CVE-2023-46604 KEV ransomware
- CVE-2023-46805 KEV ransomware
- CVE-2023-47246 KEV ransomware
Show all 22 CVEs Show fewer
- CVE-2023-48788 KEV ransomware
- CVE-2023-6895
- CVE-2024-0012 KEV ransomware
- CVE-2024-1709 KEV ransomware
- CVE-2024-21887 KEV ransomware
- CVE-2024-21893 KEV ransomware
- CVE-2024-21983
- CVE-2024-3400 KEV ransomware
- CVE-2024-47575 KEV
- CVE-2024-9474 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
Show all 40 reports Show fewer
-
Alert (AA22-264A) Iranian State Actors Conduct Cyber Operations Against the Government of Albania
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Alert (AA22-264A) Iranian State Actors Conduct Cyber Operations Against the Government of Albania
-
Microsoft investigates Iranian attacks against the Albanian government
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Microsoft investigates Iranian attacks against the Albanian government
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Likely Iranian Threat Actor Conducts Politically Motivated Disruptive Activity Against Albanian Government Organizations
Newest first. Details opens the report in Explore.