[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgXSv8fuVxAR0OnJrw_IQ54byV4By8CkpD8-mRUQ4OfE":3},{"article":4,"iocs":31,"watch_terms":38},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":10,"url":11,"image_url":10,"published_at":12,"ingested_at":13,"relevance_score":14,"entities":15,"category_id":16,"category":17,"article_tags":20},"fe2b57eb-094a-4620-9a01-b1098231b139","Lyceum suicide drone","lyceum-suicide-drone","ClearSky discovered a new malware associated with the Iranian SiameseKitten (Lyceum) group withmedium-high confidence.The file is downloaded from a domain registered on June 6th, and it communicates with a previously unknown command and control server whose IP address is adjacent to that of the domain. This indicates an attacker-controlled at least two IP’s on the […]","ClearSky identified a new malware variant linked to the Iranian Lyceum (SiameseKitten) APT group with medium-high confidence. The malware is distributed from a recently registered domain and communicates with a previously unknown C2 server, with both infrastructure components sharing adjacent IP addresses suggesting coordinated attacker control.",null,"https:\u002F\u002Fwww.clearskysec.com\u002Flyceum-suicide-drone\u002F","2022-06-23T14:55:06+00:00","2026-03-15T06:36:29.357651+00:00",8,[],"6cbdd207-aaa1-4176-9534-e156b125e917",{"id":16,"icon":10,"name":18,"slug":19},"Nation-state","nation-state",[21,26],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[32,34],{"type":25,"value":6,"context":33},"New malware variant associated with Iranian Lyceum\u002FSiameseKitten APT group",{"type":35,"value":36,"context":37},"mitre_attack","Lyceum","Iranian state-sponsored APT group (also known as SiameseKitten)",[]]