Threat actorIranTracked since 2026-10

CURIUM - G1012

Also known as:TortoiseshellTA456

As of 2026-10-16, CURIUM - G1012 is a Iran-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning apt. Also known as Tortoiseshell, TA456.

Tracked threats: 11 high
First seen: 2026-102026-10-16
Last seen: 2026-102026-10-16
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: IranNation or origin

Nation: Iran · 1 tracked threat(s) · Categories: APT

Activity timeline

CURIUM - G1012 appears in 1 tracked threat between 2026-10-16 and 2026-10-16.

Tracked threats

Fata Morgana: Watering hole attack on Israeli shipping and logistics websites (Iran-nexus, low-confidence Tortoiseshell/TA456)HIGH2026-10-16