Iranian state-aligned threat actor targets new victims in cyberespionage and kinetic campaigns

New research from Proofpoint exposes a large shift in the TA453 threat actor’s modus operandi, which started conducting more hostile attacks.

TA435 is now employing more aggressive tactics, including the use of real email accounts, malware and confrontational lures to gain access to key accounts. The threat actor targets high-profile and high-security accounts for cyberespionage purposes.

TA453 is a state-sponsored Iranian cyberespionage threat actor. TA453 has been known for almost always targeting academics, researchers, diplomats, dissidents, journalists and human right workers, all with expertise in the Middle-East, according to Proofpoint. TA453 overlaps with cyberespionage groups Charming Kitten, Phosphorus and APT42.