high_confidence
C0010
[C0010](https://attack.mitre.org/campaigns/C0010) was a cyber espionage campaign conducted by UNC3890 that targeted Israeli shipping, government, aviation, energy, and healthcare organizations. Security researcher assess UNC3890 conducts operations in support of Iranian interests, and noted several limited technical connections to Iran, including PDB strings and Farsi language artifacts. [C0010](https://attack.mitre.org/campaigns/C0010) began by at least late 2020, and was still ongoing as of mid-2022.(Citation: Mandiant UNC3890 Aug 2022)
Start date
1 December 2020
End date
1 August 2022
Techniques
9
Attributed actors
Techniques (9)
command-and-control1
T1105Ingress Tool Transfer
initial-access1
T1189Drive-by Compromise
resource-development7
T1587.001Malware
T1588.002Tool
T1608.004Drive-by Target
T1608.001Upload Malware
T1583.001Domains
T1584.001Domains
T1608.002Upload Tool
Indicators of compromise
No IOCs linked to this campaign yet.