Threat IntelligenceJun 1, 2026
Detecting Nimbus Manticore (UNC1549) While previous reporting documented the threat actor’s oper...
Mandiant releases detection rules and IOCs for Nimbus Manticore (UNC1549) threat actor
Vendor Watch
Run Mandiant?
Get an email when a reviewed story names Mandiant, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
Mandiant has published comprehensive detection guidance for Nimbus Manticore (UNC1549), a known threat actor, including multiple YARA rules, campaign-specific detections, generic hunting logic, and enriched IOCs. The analysis is designed to help defenders identify and respond to this threat actor's operations. The release includes practical detection opportunities for security teams.
Entities
Nimbus Manticore (UNC1549) (threat_actor)Mandiant (vendor)