POLONIUM
POLONIUM is an Iran-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 12 sectors, including Government and Technology, in 3 countries, including Italy and Israel. It uses 49 MITRE ATT&CK techniques and exploits 1 known CVE.
- Plaid Rain
- Incendiary Jackal
- G1005
- Origin
- Iran
- Techniques
- 49
- Exploited CVEs
- 1
- First seen
- Jan 1, 2022
- Last seen
- Jun 2, 2022
- Record updated
Who They Target.
About POLONIUM.
POLONIUM is a Lebanon-based group that has primarily targeted Israeli organizations, including critical manufacturing, information technology, and defense industry companies, since at least February 2022. Security researchers assess POLONIUM has coordinated their operations with multiple actors affiliated with Iran's Ministry of Intelligence and Security (MOIS), based on victim overlap as well as common techniques and tooling.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.