Magic Hound
MITRE: G0059Magic Hound is a known alias of the APT group APT35
Magic Hound is an Iranian-sponsored threat group that conducts long term, resource-intensive cyber espionage operations, likely on behalf of the Islamic Revolutionary Guard Corps. They have targeted European, U.S., and Middle Eastern government and military personnel, academics, journalists, and organizations such as the World Health Organization (WHO), via complex social engineering campaigns since at least 2014.
Techniques, tactics and practices:
Magic Hound is a sophisticated cyber espionage group that has been active since at least 2013. They are believed to be associated with the Chinese government and have targeted organizations in various industries, including finance, technology, and defense. Their techniques include spear-phishing emails, watering hole attacks, and exploiting vulnerabilities in software such as Microsoft Office.