NCSC-TAD-2506-003
مستوى الخطورة: حرجة
تصيد احتيالي
الرقم المرجعي: NCSC-TAD-2506-003CVSS 0
Educated Manticore Reemerges: Iranian Spear-Phishing Campaign Targeting High-Profile Figures
- نوع التهديد:
- غير متوفر
- مستوى المشاركة (TLP):
- CLEAR
- CVE:
- غير متوفر
نظرة عامة
Educated Manticore targeted academics, researchers, and journalists in the Middle East through email and private messaging. Attackers impersonated trusted contacts and used fake sign-in pages and meeting invitations to steal credentials and authentication codes.
التقنيات المتأثرة
- Outlook
- Yahoo
- Google Meet
إجراءات الحد من المخاطر والإجراءات الفورية
- 01
Verify senders through an established, independent communication channel.
- 02
Check URLs before entering credentials.
- 03
Enable and monitor two-factor authentication, do not share authentication codes.
- 04
Report suspicious approaches to the security team.