Iranian threat actor, Void Manticore, affiliated with Iran's MOIS, has been targeting Israeli organizations with wiping attacks and influence operations since October 2023. Known for using online personas like 'Karma' and 'Homeland Justice,' the group has executed attacks involving data wiping, theft, and leaks, with a notable tool being the custom BiBi wiper. Check Point Research has observed a significant overlap in targets between Void Manticore and another Iranian threat actor, Scarred Manticore, suggesting systematic handoffs of victims
Void Manticore's tactics involve manual deletions, custom wipers for Windows and Linux systems, lateral movement through RDP, and rapid, high-impact attacks. The group leverages geopolitical tensions to mask their activities and has targeted over 40 Israeli organizations. Their collaboration with Scarred Manticore demonstrates a high level of operational coordination, making them a dangerous presence in the Iranian threat landscape. https://www.infosecurity-magazine.com/news/iranlinked-void-manticore/