Gray Sandstorm
Also reported as DEV-0343. Linked to Iran by three sources.
Reports per quarter
CVEs named in reports
- CVE-2018-13379 KEV ransomware
- CVE-2021-26855 KEV ransomware
- CVE-2021-26857 KEV ransomware
- CVE-2021-26858 KEV ransomware
- CVE-2021-27065 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021
-
Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors
Newest first. Details opens the report in Explore.