G0064 APT33

EnterpriseICS

also known asAPT33 · HOLMIUM · Elfin · Peach Sandstorm

APT33 is a suspected Iranian threat group that has carried out operations since at least 2013. The group has targeted organizations across multiple industries in the United States, Saudi Arabia, and South Korea, with a particular interest in the aviation and energy sectors.

01

canonical actor

The group this is attributed to.

04

Detected by (Sigma) (1)

Sigma detection rules related to this.

05

source

Where this definition is published.