Tag: DEV-0343 threat group

Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021

Posted on

Over the past year, the Microsoft Threat Intelligence Center (MSTIC) has observed a gradual evolution of the tools, techniques, and procedures employed by malicious network operators based in Iran. At CyberWarCon 2021, MSTIC analysts presented their analysis of these trends Read More …

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

Posted on

DEV-0343 is a new activity cluster that the Microsoft Threat Intelligence Center (MSTIC) first observed and began tracking in late July 2021. MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus Read More …