Threat Investigation
Request a demo
Other threat group

Void Manticore

Void Manticore is classified as other threat group.

Malware families
2
Origin
Iran

Void Manticore is an Iranian APT group affiliated with MOIS, known for conducting destructive wiping attacks and influence operations. They collaborate with Scarred Manticore, sharing targets and conducting disruptive operations using custom wipers. Void Manticore's TTPs involve manual file deletion, lateral movement via RDP, and the deployment of custom wipers like the BiBi wiper. The group utilizes online personas like 'Karma' and 'Homeland Justice' to leak information and amplify the impact of their attacks.

The group's reported origin is Iran.

The group is associated with 2 malware families.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Void Manticore · Threat actors · Dark Radar