| SYMBOL | COMMON_NAME | aka. SYNONYMS |
Resecurity’s research indicates that the attack on Parliament is a part of a multi-year cyberespionage campaign orchestrated by a nation-state actor whom we are calling IRIDIUM. This actor targets sensitive government, diplomatic, and military resources in the countries comprising the Five Eyes intelligence alliance (which includes Australia, Canada, New Zealand, the United Kingdom and the United States)
There are currently no families associated with this actor.
| 2019-03-11 ⋅ Packt ⋅ Resecurity reports ‘IRIDUIM’ behind Citrix data breach, 200+ government agencies, oil and gas companies, and technology companies also targeted. IRIDIUM |
| 2019-03-11 ⋅ Threatpost ⋅ Researcher Claims Iranian APT Behind 6TB Data Heist at Citrix IRIDIUM |
| 2019-03-08 ⋅ NBC ⋅ Iranian-backed hackers stole data from major U.S. government contractor IRIDIUM |