Anybody aware of a MISP server with events tagged with 'APT Iran"

[jamesjguthrie@infosec.exchange]

Anybody aware of a MISP server with events tagged with 'APT Iran" ?
CIRCL doesn't have anything.
Let me know please, would like to sync my instance.

[nieldk@infosec.exchange]

@jamesjguthrie dunno, but maybe search for for example "Handala Hack" and "VoidManticore" ?

[jamesjguthrie@infosec.exchange]

@nieldk they're different groups, 'APT Iran' is supposedly a unique threat actor https://unit42.paloaltonetworks.com/iranian-cyberattacks-2026/

[nieldk@infosec.exchange]

@jamesjguthrie related to the Kash Patels “hack” ?

[jamesjguthrie@infosec.exchange]

@nieldk no, the group who claimed the Lockheed Martin hack recently.

[nieldk@infosec.exchange]

@jamesjguthrie that would be Handala