Nation-stateJun 23, 2022
Lyceum suicide drone
ClearSky identified a new malware variant linked to the Iranian Lyceum (SiameseKitten) APT group with medium-high confidence. The malware is distributed from a recently registered domain and communicates with a previously unknown C2 server, with both infrastructure components sharing adjacent IP addresses suggesting coordinated attacker control.
Summary
ClearSky identified a new malware variant linked to the Iranian Lyceum (SiameseKitten) APT group with medium-high confidence. The malware is distributed from a recently registered domain and communicates with a previously unknown C2 server, with both infrastructure components sharing adjacent IP addresses suggesting coordinated attacker control.
Indicators of Compromise
- malware — Lyceum suicide drone
- mitre_attack — Lyceum