Israel, Turkey (MENA subset of a wider campaign; source also lists Austria, India, Italy, and US/Europe victims)
Sectors
Cross-sector
Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Israel, Turkey (MENA subset of a wider campaign; source also lists Austria, India (Cross-sector sector).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.
How evasion-resistant our detection coverage is against BellaCiao operators (Charming Kitten-linked)'s techniques — Summiting the Pyramid scores analytics (1 brittle – 5 robust); the actor inherits through its TTPs. This is a detection-engineering metric, not an attribution signal — see Attribution for confidence.
Techniques with a robust rule
0%
Techniques with any detection
6 / 8
Mean robustness (of covered)
2.2
Useful?
→
Gather Victim Host Informationtechnique
ATT&CK mapping
→Data EncodingtechniqueATT&CK mapping
→Server Software Component: Web ShelltechniqueATT&CK mapping
→Impair Defenses: Disable or Modify ToolstechniqueATT&CK mapping
→Protocol TunnelingtechniqueATT&CK mapping
→Create or Modify System Process: Windows ServicetechniqueATT&CK mapping