Scarred Manticore
0 incidentes
0 paises
0 sectores
apt IR Ultimo: -
Scarred Manticore is an Iranian state-sponsored cyber espionage group, assessed with high confidence to be linked to Iran's Ministry of Intelligence and Security (MOIS). The group first emerged around 2019, conducting initial cyber espionage operations primarily utilizing the open-source web shell Tunna. Over time, Scarred Manticore's capabilities evolved significantly, progressing from basic web shell attacks to employing more advanced frameworks such as Foxshell and the sophisticated LIONTAIL. Their primary motivation is cyber espionage, systematically exfiltrating data to advance Iran's geopolitical strategy and national interests in the Middle East and beyond. What distinguishes Scarred Manticore is its role as an initial access broker within a strategic collaboration with another MOIS-linked group, Void Manticore (also known as Storm-842). Scarred Manticore specializes in gaining and maintaining persistent covert access to victim networks, then hands off this access to Void Mantic