Threat Intelligence / Actor / Nimbus Manticore (UNC1549)

Nimbus Manticore (UNC1549)

Nation: Iran · 1 tracked threat(s) · Categories: MALWARE

Also known as: UNC1549, Smoke Sandstorm, Yellow Dev 21

Tracked threats

Nimbus Manticore (UNC1549/IRGC) SQL Developer SEO Poisoning Campaign Delivers MiniFast Backdoor via AppDomain Hijacking — Operation Epic Fury Wave 3 — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence