Skip to main content
عربي
logo

NCSC-TAD-2506-003

Severity Level: Critical
Phishing

Reference No.: NCSC-TAD-2506-003CVSS 0

Educated Manticore Reemerges: Iranian Spear-Phishing Campaign Targeting High-Profile Figures

Threat Type:
N/A
TLP:
CLEAR
CVE:
N/A

Overview

Educated Manticore targeted academics, researchers, and journalists in the Middle East through email and private messaging. Attackers impersonated trusted contacts and used fake sign-in pages and meeting invitations to steal credentials and authentication codes.

Affected Technologies

  • Google
  • Outlook
  • Yahoo
  • Google Meet
  • WhatsApp

Mitigation and Immediate Actions

  1. 01

    Verify senders through an established, independent communication channel.

  2. 02

    Check URLs before entering credentials.

  3. 03

    Enable and monitor two-factor authentication, do not share authentication codes.

  4. 04

    Report suspicious approaches to the security team.

References