CERT24Nimbus Manticore Expanded Attacks With AI-Assisted Malware and Fake Zoom InstallersLoading data…
CERT24Threat Observatory
Period

Nimbus Manticore Expanded Attacks With AI-Assisted Malware and Fake Zoom Installers

According to a Check Point report, the Iran-linked threat actor Nimbus Manticore (UNC1549) expanded its activity from February to April 2026 using AI-assisted malware development, fake Zoom installers, and search-engine-optimization poisoning. The campaigns targeted, among others, defense, aviation, telecommunications, and software development organizations.

← Back to intelligence

Nimbus Manticore Expanded Attacks With AI-Assisted Malware and Fake Zoom Installers

According to a Check Point report, the Iran-linked threat actor Nimbus Manticore (UNC1549) expanded its activity from February to April 2026 using AI-assisted malware development, fake Zoom installers, and search-engine-optimization poisoning. The campaigns targeted, among others, defense, aviation, telecommunications, and software development organizations.