Pulse Detail — Threat Intelligence

● 0 online

ANALYZING THREAT INTELLIGENCE

PULSE NAME

Crossed wires: a case study of Iranian espionage and attribution

WHITE UNK_SmudgedSerpent Tr1sa111 2025-11-06 Modified: 2025-11-06

58

IOCs

HIGH VOLUME

↓ CSV ↓ JSON

credential harvesting isl online minibike rmm tools phishing overlapping ttps policy experts targeting minijunk espionage pdqconnect attribution challenges iranian threat actor

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1059.007 T1133 T1204.002 T1071 T1190 T1193 T1087 T1102 T1204 T1059.001 T1199 T1098 T1566 T1078 T1573 T1059.006 T1132 T1189

Indicators of Compromise (1 / 58 total)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-MD5	f63ceb9f6b3a28b6858976e5549d3247	—	2025-11-06

References (1)

↗ https://www.proofpoint.com/us/blog/threat-insight/crossed-wires-case-study-iranian-espionage-and-attribution