Unknown Iranian attackers leverage vulnerabilities to conduct ransom operations

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

The Iranian government-sponsored actors carry out malicious cyber activities against a wide range of people and entities in the United States, Australia, Canada, and the United Kingdom by using known vulnerabilities in Fortinet, Microsoft Exchange, Log4j, and VMware Horizon.