aol.pm

CyberAv3ngers

IntrusionSet · ATTACK:ics:G1027

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:ics:G1027",
  "title": "CyberAv3ngers",
  "type": "IntrusionSet",
  "source_url": "https://attack.mitre.org/groups/G1027",
  "snapshot": "ics-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "intrusion-set--a07a367a-146c-45a8-a830-d3d337b9befa",
  "external_id": "G1027",
  "domain": "ics",
  "created": "2024-03-25T19:57:07.829Z",
  "modified": "2026-10-07T13:46:33.122Z",
  "version": "1.1",
  "aliases": [
    "CyberAv3ngers",
    "Soldiers of Soloman"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Soldiers of Soloman"
    },
    {
      "source_name": "CISA AA23-335A IRGC-Affiliated December 2023",
      "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a"
    }
  ]
}

Explicit source assertions (18)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:ics:G1027 → uses → ATTACK:ics:T0883

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--186bd80c-9e22-4e3d-9515-dbe5c89892fe

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T0871

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--21ccb883-2961-4b3a-9e1a-4439190aea49

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T0838

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--283cbc1b-e998-4b44-81d1-c39f1f45b2bd

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T0843

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--388df1cd-3e92-4eee-ac0f-6d8b824cd42f

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T0879

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4ad65338-18dd-4ccf-96d9-a15c0af8e2e2

Tenable Minnesota Water Utilities

ATTACK:ics:G1027 → uses → ATTACK:ics:T0829

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5526e92e-070b-402e-b149-a06bff5a4549

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T1694.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--76c3caa4-bc2a-437d-9826-3d32a78ff76a

Dispel Iran Water Utilities · Tenable Minnesota Water Utilities

ATTACK:ics:G1027 → uses → ATTACK:ics:T0826

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--89923285-812d-4a09-8536-bf41943e8229

Tenable Minnesota Water Utilities

ATTACK:ics:G1027 → uses → ATTACK:ics:T0880

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9058043b-50b6-48de-b34b-5fb254fe471b

CISA-AA26-097A

ATTACK:ics:C0031 → attributed-to → ATTACK:ics:G1027

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9a55e351-d3b7-460a-9a9d-6714c00db5f0

CISA AA23-335A IRGC-Affiliated December 2023

ATTACK:ics:G1027 → uses → ATTACK:ics:T1695

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a61e5450-cfb0-46b4-9726-0e28c4e97a6b

Tenable Minnesota Water Utilities

ATTACK:ics:G1027 → uses → ATTACK:ics:T0827

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ab85bff5-7f2a-400c-a86e-b63747200e1f

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T1692.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--abce8e63-b622-441b-9b79-1fdd95da8cff

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--acc06595-994a-469b-972e-c71ab3298dde

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T0885

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cf125e14-158c-4bd2-9d86-61f349704c99

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T0889

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--efe09c77-8ba8-4735-b1c9-5c9c01a67320

CISA-AA26-097A

ATTACK:ics:G1027 → uses → ATTACK:ics:T0892

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f8578dec-7c78-4af3-b62f-4f305bd991bb

Tenable Minnesota Water Utilities

ATTACK:ics:G1027 → uses → ATTACK:ics:T0886

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ff63658f-6d46-48b4-b524-d02dd715be42

CISA-AA26-097A

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.