Unmasking the IranianAPT COBALT MIRAGE

SANS Cyber Threat Intelligence Summit 2023

Unmasking the IranianAPT COBALT MIRAGE
Lina Lau, Principal Incident ResponseConsultant - APJ South, Secureworks

From operational security failures to a Department of Justice (DOJ) indictment, COBALT MIRAGE likes to blur the lines between espionage and revenue generation. This talk uncovers the tactics, techniques and procedures deployed by COBALT MIRAGE from incidents worked at Secureworks. It's not often white hats see operational security failures unmask the identity of the adversary and even rarer to see …

adversary apj cobalt cobalt mirage contractor critical cyber cyber threat cyber threat intelligence department department of justice doj espionage identity incident incidents indictment intelligence iranianapt justice learn operational operational security procedures revenue role sans secureworks security sentencing south summit tactics techniques techniques and procedures threat threat intelligence white hats