The article details the "Nimbus Manticore" threat actor's operations during the Iranian conflict, describing their use of a sophisticated, multi-stage attack chain involving spear-phishing, cloud-based infrastructure, and legitimate remote management tools for initial access and lateral movement. The report does not provide a specific vulnerability, CVSS score, affected software versions, a fixed version, or a workaround, focusing instead on the group's tactics, techniques, and procedures (TTPs).
2026-05-22 (Back to Inventory) Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict Author(s): Checkpoint Research Organization: Check Point win.minifast Open article directly Open article on Archive.org Related Articles 2026-05-13 ⋅ Check Point Research ⋅ Checkpoint Research THUS SPOKE…THE GENTLEMEN Gentlemen 2026-03-12 ⋅ Check Point Research ⋅ Checkpoint Research “Handala Hack” – Unveiling Group’s Modus Operandi 2026-01-20 ⋅ Checkpoint ⋅ Checkpoint Research VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has Begun VoidLink