The group has used more than 30 custom tools, and especially likes to target government and telecommunications organizations.

Mandiant links Iranian APT UNC1860 to MOIS, revealing its sophisticated remote access tools and persistent backdoors ...

The threat group UNC1860, linked to Iran's security intelligence agency, gains initial access into networks around the region ...

Iranian state-sponsored threat actor UNC1860 is operating as an initial access provider to high-profile networks in the Middle East.

With its comprehensive passive/listener-based utilities for initial access and lateral movement, UNC1860 may have supported ...

The Iranian threat actor UNC1860 is a collector of specialized tooling and passive backdoors for gaining initial access and ...

UNC1860, an Iranian state-sponsored threat actor, has emerged as a formidable cyber force in the Middle East. Likely tied to Iran’s Ministry of Intelligence and Security (MOIS), UNC1860 group is known ...