← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
IOC - Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting the Aerospace and Defense Ecosystem | Google Cloud Blog
A new report from security firm Mandiant outlines the tactics and tools used by a group targeting the aerospace, aviation and defense industries in the Middle East in late 2023 to mid-2024.
MITRE ATT&CK & Malware Families
Indicators of Compromise (14)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| FileHash-MD5 | 10f16991665df69d1ccd5187e027cf3d | — | 2025-11-19 | |
| FileHash-MD5 | b2bd275f97cb95c7399065b57f90bb6c | — | 2025-11-19 | |
| URL | https://aaaaaaaaaaaaaaaaaa.bbbbbb.cccccccc.ddddd.com/page | — | 2025-11-19 | |
| domain | airplaneserviceticketings.com | — | 2025-11-19 | |
| domain | airtravellog.com | — | 2025-11-19 | |
| domain | automationagencybusiness.com | — | 2025-11-19 | |
| domain | fdtsprobusinesssolutions.com | — | 2025-11-19 | |
| domain | forcecodestore.com | — | 2025-11-19 | |
| domain | politicalanorak.com | — | 2025-11-19 | |
| domain | thetacticstore.com | — | 2025-11-19 | |
| domain | tini-ventures.com | — | 2025-11-19 | |
| domain | vcs-news.com | — | 2025-11-19 | |
| hostname | aaaaaaaaaaaaaaaaaa.bbbbbb.cccccccc.ddddd.com | — | 2025-11-19 | |
| hostname | airbus.usa-careers.com | — | 2025-11-19 |