UNC1549

An Iranian cyber-espionage actor targeting aerospace, defense, and telecommunications organizations in the Middle East and Europe. It uses tailored recruitment or job-themed spearphishing and custom malware including MINIBIKE, MINIBUS, and LIGHTRAIL; it overlaps with reporting on Nimbus Manticore.