G1005 POLONIUM
Enterprisealso known asPOLONIUM · Plaid Rain
POLONIUM is a Lebanon-based group that has primarily targeted Israeli organizations, including critical manufacturing, information technology, and defense industry companies, since at least February 2022. Security researchers assess POLONIUM has coordinated their operations with multiple actors affiliated with Iran’s Ministry of Intelligence and Security (MOIS), based on victim overlap as well as common techniques and tooling.
01
canonical actor
The group this is attributed to.
02
techniques used (7)
ATT&CK techniques this enables or maps to.
03
software used (2)
Malware and tools associated with this.
04
source
Where this definition is published.