Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

POLONIUM

1 incidentes 1 paises 1 sectores threat-actor LB Ultimo: 2026-05-25

Aliases: Plaid Rain, APT POLONIUM

Ver en IntelTracker → APTTrail →

POLONIUM is a Lebanon-based group that has primarily targeted Israeli organizations, including critical manufacturing, information technology, and defense industry companies, since at least February 2022. Security researchers assess POLONIUM has coordinated their operations with multiple actors affiliated with Iran’s Ministry of Intelligence and Security (MOIS), based on victim overlap as well as common techniques and tooling.

Aliases del actor

Plaid Rain APT POLONIUM

Actores similares

apt-poloniumactor · 1 apt-c-01actor · 2 apt-c-27actor · 2 apt-45actor · 2 apt-c-37actor · 1 apt-c-23actor · 1 hellsing-aptactor · 1 apt-c-44actor · 1 apt-c-38actor · 1 apt-c-12actor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
Repositorio	unknown	github.com	APT POLONIUM indicators and references
X/Twitter	unknown	twitter.com	APT POLONIUM indicators and references
Web	unknown	www.virustotal.com	APT POLONIUM indicators and references
Web	unknown	www.virustotal.com	APT POLONIUM indicators and references
Web	unknown	www.welivesecurity.com	APT POLONIUM indicators and references
Repositorio	unknown	github.com	APT POLONIUM indicators and references
Web	unknown	raw.githubusercontent.com	APT POLONIUM indicators and references
X/Twitter	unknown	212.73.150.174APTTrailURLhttp	APT POLONIUM indicators and references
Web	unknown	attack.mitre.org	OSINT

Motivacion