#voidmanticore — Public Fediverse posts

Insights: Increased Risk of Wiper Attacks
#HandalaHackTeam #VoidManticore
https://unit42.paloaltonetworks.com/handala-hack-wiper-attacks/

Rapid7 Detection Coverage for Iran-Linked Cyber Activity
#MuddyWater #VoidManticore #HandalaHackTeam #CyberAv3ngers #Keymous+ #DieNet #NoName057(16) #CVE_2026_1281 #CVE_2024_4577 #CVE_2025_32433 #CVE_2025_52691 #CVE_2025_9316 #CVE_2026_21514
https://www.rapid7.com/blog/post/tr-detection-coverage-iran-linked-cyber-activity/

Rapid7 Detection Coverage for Iran-Linked Cyber Activity
#MuddyWater #VoidManticore #HandalaHackTeam #CyberAv3ngers #Keymous+ #DieNet #NoName057(16) #CVE_2026_1281 #CVE_2024_4577 #CVE_2025_32433 #CVE_2025_52691 #CVE_2025_9316 #CVE_2026_21514
https://www.rapid7.com/blog/post/tr-detection-coverage-iran-linked-cyber-activity/

Rapid7 Detection Coverage for Iran-Linked Cyber Activity
#MuddyWater #VoidManticore #HandalaHackTeam #CyberAv3ngers #Keymous+ #DieNet #NoName057(16) #CVE_2026_1281 #CVE_2024_4577 #CVE_2025_32433 #CVE_2025_52691 #CVE_2025_9316 #CVE_2026_21514
https://www.rapid7.com/blog/post/tr-detection-coverage-iran-linked-cyber-activity/

Rapid7 Detection Coverage for Iran-Linked Cyber Activity
#MuddyWater #VoidManticore #HandalaHackTeam #CyberAv3ngers #Keymous+ #DieNet #NoName057(16) #CVE_2026_1281 #CVE_2024_4577 #CVE_2025_32433 #CVE_2025_52691 #CVE_2025_9316 #CVE_2026_21514
https://www.rapid7.com/blog/post/tr-detection-coverage-iran-linked-cyber-activity/

Rapid7 Detection Coverage for Iran-Linked Cyber Activity
#MuddyWater #VoidManticore #HandalaHackTeam #CyberAv3ngers #Keymous+ #DieNet #NoName057(16) #CVE_2026_1281 #CVE_2024_4577 #CVE_2025_32433 #CVE_2025_52691 #CVE_2025_9316 #CVE_2026_21514
https://www.rapid7.com/blog/post/tr-detection-coverage-iran-linked-cyber-activity/

Iran-linked cyber espionage surges across Middle East as conflict tensions rise, researchers say

New research from Proofpoint shows that escalating tensions involving Iran have coincided with a surge in cyber espionage…
#Israel #News #APT42 #CharmingKitten #CheckPoint #CobaltStrike #CyberEspionage #cyberoperations #cybercrime #espionage #HandalaHack #MintSandstorm #MuddyWater #phishing #proofpoint #TA453 #VoidManticore
https://www.europesays.com/2840087/

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

https://krebsonsecurity.com/2026/03/iran-backed-hackers-claim-wiper-attack-on-medtech-firm-stryker/

#MinistryofIntelligenceandSecurity #Ne'er-Do-WellNews #PaloAltoNetworks #ALittleSunshine #MicrosoftIntune #LatestWarnings #TheComingStorm #IrishExaminer #VoidManticore #HandalaHack #wiperattack #Handala #Stryker

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

https://krebsonsecurity.com/2026/03/iran-backed-hackers-claim-wiper-attack-on-medtech-firm-stryker/

#MinistryofIntelligenceandSecurity #Ne'er-Do-WellNews #PaloAltoNetworks #ALittleSunshine #MicrosoftIntune #LatestWarnings #TheComingStorm #IrishExaminer #VoidManticore #HandalaHack #wiperattack #Handala #Stryker

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

https://krebsonsecurity.com/2026/03/iran-backed-hackers-claim-wiper-attack-on-medtech-firm-stryker/

#MinistryofIntelligenceandSecurity #Ne'er-Do-WellNews #PaloAltoNetworks #ALittleSunshine #MicrosoftIntune #LatestWarnings #TheComingStorm #IrishExaminer #VoidManticore #HandalaHack #wiperattack #Handala #Stryker

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

https://krebsonsecurity.com/2026/03/iran-backed-hackers-claim-wiper-attack-on-medtech-firm-stryker/

#MinistryofIntelligenceandSecurity #Ne'er-Do-WellNews #PaloAltoNetworks #ALittleSunshine #MicrosoftIntune #LatestWarnings #TheComingStorm #IrishExaminer #VoidManticore #HandalaHack #wiperattack #Handala #Stryker

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

https://krebsonsecurity.com/2026/03/iran-backed-hackers-claim-wiper-attack-on-medtech-firm-stryker/

#MinistryofIntelligenceandSecurity #Ne'er-Do-WellNews #PaloAltoNetworks #ALittleSunshine #MicrosoftIntune #LatestWarnings #TheComingStorm #IrishExaminer #VoidManticore #HandalaHack #wiperattack #Handala #Stryker

#Iran's State Hackers Partner Up for Large-Scale Attacks, Report
Check Point researchers have detailed a new Iranian state-sponsored hacker group called #VoidManticore, partnering with #ScarredManticore, another threat group based in Iran’s Ministry of Intelligence and Security. Their most recent attacks involved the BiBi Wiper (named after Israeli Prime Minister Benjamin Netanyahu), which can corrupt files and disrupt system functionality. https://www.hackread.com/iranian-state-hackers-partner-up-for-attacks/ #APT

#Iran's State Hackers Partner Up for Large-Scale Attacks, Report
Check Point researchers have detailed a new Iranian state-sponsored hacker group called #VoidManticore, partnering with #ScarredManticore, another threat group based in Iran’s Ministry of Intelligence and Security. Their most recent attacks involved the BiBi Wiper (named after Israeli Prime Minister Benjamin Netanyahu), which can corrupt files and disrupt system functionality. https://www.hackread.com/iranian-state-hackers-partner-up-for-attacks/ #APT

#Iran's State Hackers Partner Up for Large-Scale Attacks, Report
Check Point researchers have detailed a new Iranian state-sponsored hacker group called #VoidManticore, partnering with #ScarredManticore, another threat group based in Iran’s Ministry of Intelligence and Security. Their most recent attacks involved the BiBi Wiper (named after Israeli Prime Minister Benjamin Netanyahu), which can corrupt files and disrupt system functionality. https://www.hackread.com/iranian-state-hackers-partner-up-for-attacks/ #APT

#Iran's State Hackers Partner Up for Large-Scale Attacks, Report
Check Point researchers have detailed a new Iranian state-sponsored hacker group called #VoidManticore, partnering with #ScarredManticore, another threat group based in Iran’s Ministry of Intelligence and Security. Their most recent attacks involved the BiBi Wiper (named after Israeli Prime Minister Benjamin Netanyahu), which can corrupt files and disrupt system functionality. https://www.hackread.com/iranian-state-hackers-partner-up-for-attacks/ #APT

#Iran's State Hackers Partner Up for Large-Scale Attacks, Report
Check Point researchers have detailed a new Iranian state-sponsored hacker group called #VoidManticore, partnering with #ScarredManticore, another threat group based in Iran’s Ministry of Intelligence and Security. Their most recent attacks involved the BiBi Wiper (named after Israeli Prime Minister Benjamin Netanyahu), which can corrupt files and disrupt system functionality. https://www.hackread.com/iranian-state-hackers-partner-up-for-attacks/ #APT

Happy Wednesday everyone!

The Check Point Software researchers highlight a recent attack by an adversary they call #VoidManticore and the tools, TTPs, and behaviors they observed. A notable technique was the deployment of different variants of wipers that, if you analyze some of the behaviors they exhibited, could be confused with ransomware. There was the destruction of shadow copies using vssadmin and abuse bcdedit to modify the boot configuration to prevent recovery. But the added activity of removing partition information is what revealed the wiper's true identity. It is a very good read and I highly recommend it! Enjoy and Happy Hunting!

BAD KARMA, NO JUSTICE: VOID MANTICORE DESTRUCTIVE ACTIVITIES IN ISRAEL
https://research.checkpoint.com/2024/bad-karma-no-justice-void-manticore-destructive-activities-in-israel/

#CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting #readoftheday

Void Manticore: Iranian Threat Actor Targeting Israel and Beyond with Data Wipers https://thecyberexpress.com/void-manticore-iranian-threat-actor/ #TheCyberExpressNews #IranianThreatActor #CybersecurityNews #HomelandJustice #TheCyberExpress #VoidManticore #CyberWarfare #ThreatActors #cyberwarfare #DataWiping #Ransomware #datawiper #Storm842 #Albania #wipers #Karma #Iran

Void Manticore: Iranian Threat Actor Targeting Israel and Beyond with Data Wipers https://thecyberexpress.com/void-manticore-iranian-threat-actor/ #TheCyberExpressNews #IranianThreatActor #CybersecurityNews #HomelandJustice #TheCyberExpress #VoidManticore #CyberWarfare #ThreatActors #cyberwarfare #DataWiping #Ransomware #datawiper #Storm842 #Albania #wipers #Karma #Iran

Void Manticore: Iranian Threat Actor Targeting Israel and Beyond with Data Wipers https://thecyberexpress.com/void-manticore-iranian-threat-actor/ #TheCyberExpressNews #IranianThreatActor #CybersecurityNews #HomelandJustice #TheCyberExpress #VoidManticore #CyberWarfare #ThreatActors #cyberwarfare #DataWiping #Ransomware #datawiper #Storm842 #Albania #wipers #Karma #Iran

Void Manticore: Iranian Threat Actor Targeting Israel and Beyond with Data Wipers https://thecyberexpress.com/void-manticore-iranian-threat-actor/ #TheCyberExpressNews #IranianThreatActor #CybersecurityNews #HomelandJustice #TheCyberExpress #VoidManticore #CyberWarfare #ThreatActors #cyberwarfare #DataWiping #Ransomware #datawiper #Storm842 #Albania #wipers #Karma #Iran