UNC1860
UNC1860 is an Iran-attributed nation-state APT group with an ideological motive, tracked by Brandefense. It targets 3 sectors, including Government and Manufacturing. It uses 3 MITRE ATT&CK techniques.
- Origin
- Iran
- Techniques
- 3
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2022
- Last seen
- Sep 19, 2024
- Record updated
Who They Target.
Sectors · 3
Labelsbdef-qf:latestespionagemena
About UNC1860.
Iran-linked advanced persistent threat (APT) actor, possibly affiliated with the Iranian Ministry of Intelligence and Security (MOIS), operating as an initial access facilitator.
Last updated Sep 21, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.