Iranian-linked hacker group victimized Israel’s shipping industry

Threat Level

Actor Report

For a detailed advisory, download the pdf file here

Summary

Iranian threat group (UNC3890) used social engineering lures and a watering hole to jeopardize Israel’s shipping, government, energy, aviation, and healthcare sectors. This campaign has been running since at least late 2020 and is still going strong as of mid-2022.