[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkjmziNXXqfy6OIYoAp94KVC7w1S6qVi0W1aThRQr1Zo":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":11,"target_industries":12,"target_countries":13,"incident_types":14,"references":15,"techniques":17,"technique_count":18,"created_at":19,"seoMetadata":20,"schemaOrg":24},"UNC1549","unc1549",[],"UNC1549 is an Iranian threat actor linked to Tortoiseshell and potentially the IRGC. They have been active since at least June 2022, targeting entities worldwide with a focus on the Middle East. UNC1549 uses spear-phishing and credential harvesting for initial access, deploying custom malware like MINIBIKE and MINIBUS backdoors. They have also been observed using evasion techniques and a tunneler named LIGHTRAIL in their operations.","IR",null,[],[],[],[16],"https:\u002F\u002Fwww.mandiant.com\u002Fresources\u002Fblog\u002Fsuspected-iranian-unc1549-targets-israel-middle-east",[],0,"2024-03-02T02:15:03.219754+00:00",{"title":21,"metaDescription":22,"keywords":23},"UNC1549 Threat Actor Profile | EdgeProtect","UNC1549 is an Iranian threat actor linked to Tortoiseshell and potentially the IRGC. They have been active since at least June 2022, targeting entitie...","UNC1549, threat actor, APT, cyber threat, threat intelligence, IR",{"@context":25,"@type":26,"name":6,"alternateName":27,"description":9,"url":28,"mainEntityOfPage":29,"location":31},"https:\u002F\u002Fschema.org","Organization",[],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Func1549",{"@type":30,"@id":28},"WebPage",{"@type":32,"name":10},"Country"]