← Back to Actors
VOID MANTICORE
VOID MANTICORECOBALT MYSTIQUEHandala HackHomeland JusticeKarmaKarmabelow80BANISHED KITTENRed Sandstorm
[VOID MANTICORE](https://attack.mitre.org/groups/G1055) is a threat group assessed to operate on behalf of Iran’s Ministry of Intelligence and Security (MOIS).(Citation: Check Point VOID MANTICORE Handala Hack March 2026) Active since at least mid-2022, VOID MANTICORE has targeted government entities, critical infrastructure, and private sector organizations across Albania, Israel, and the United States.(Citation: Check Point VOID MANTICORE Handala Hack March 2026)(Citation: Palo Alto VOID MANTICORE Iran Cyber Threats March 2026) [VOID MANTICORE](https://attack.mitre.org/groups/G1055) conducts...
63
Techniques
57
Covered
6
Gaps
90%
Coverage
Coverage57/63
GAPS (6)
COVERED (57)
T1003.001LSASS Memory111 det.T1005Data from Local System51 det.T1021.001Remote Desktop Protocol54 det.T1027.015Compression2 det.T1036.004Masquerade Task or Service7 det.T1036.005Match Legitimate Resource Name or Location45 det.T1041Exfiltration Over C2 Channel32 det.T1047Windows Management Instrumentation88 det.T1059.001PowerShell376 det.T1059.006Python53 det.T1071.001Web Protocols81 det.T1072Software Deployment Tools13 det.T1074Data Staged12 det.T1078Valid Accounts306 det.T1078.002Domain Accounts28 det.T1078.004Cloud Accounts188 det.T1082System Information Discovery88 det.T1087.002Domain Account58 det.T1098Account Manipulation245 det.T1102Web Service35 det.T1105Ingress Tool Transfer191 det.T1110Brute Force93 det.T1110.001Password Guessing37 det.T1110.004Credential Stuffing22 det.T1113Screen Capture19 det.T1114.002Remote Email Collection18 det.T1119Automated Collection12 det.T1123Audio Capture11 det.T1125Video Capture3 det.T1133External Remote Services77 det.T1190Exploit Public-Facing Application233 det.T1199Trusted Relationship6 det.T1204.002Malicious File461 det.T1213.002Sharepoint4 det.T1219.002Remote Desktop Software53 det.T1484.001Group Policy Modification19 det.T1485Data Destruction97 det.T1486Data Encrypted for Impact394 det.T1490Inhibit System Recovery63 det.T1547.001Registry Run Keys / Startup Folder53 det.T1552.002Credentials in Registry7 det.T1560.001Archive via Utility27 det.T1561.001Disk Content Wipe2 det.T1561.002Disk Structure Wipe3 det.T1564.003Hidden Window11 det.T1566Phishing1192 det.T1572Protocol Tunneling61 det.T1583.001Domains68 det.T1583.006Web Services1 det.T1587.001Malware10 det.T1588.001Malware2 det.T1588.002Tool13 det.T1589Gather Victim Identity Information1 det.T1595.002Vulnerability Scanning13 det.T1651Cloud Administration Command15 det.T1657Financial Theft15 det.T1686.003Windows Host Firewall20 det.