Trusted Design

POLONIUM

アクターID: G1005

· MITRE Pageへのリンク

脅威アクターの詳細

POLONIUM is a Lebanon-based group that has primarily targeted Israeli organizations, including critical manufacturing, information technology, and defense industry companies, since at least February 2022. Security researchers assess POLONIUM has coordinated their operations with multiple actors affiliated with Iran’s Ministry of Intelligence and Security (MOIS), based on victim overlap as well as common techniques and tooling.(Citation: Microsoft POLONIUM June 2022)

脅威アクターの別名・別称

POLONIUM
Plaid Rain

利用した攻撃手法

• T1045 - Software Packing
• T1608.005 - Link Target
• T1122 - Component Object Model Hijacking
• T1199 - Trusted Relationship
• T1157 - Dylib Hijacking
• T1547.002 - Authentication Package
• T1056 - Input Capture

関連するCVE (攻撃手法に関連)

• CVE-2015-3785 (T1045)
• CVE-2014-0329 (T1045)
• CVE-2012-4969 (T1045)
• CVE-2016-2342 (T1608.005)
• CVE-2012-0056 (T1157)
• CVE-2012-4792 (T1045)
• CVE-2013-7331 (T1157)
• CVE-2014-6324 (T1157)
• CVE-2010-0232 (T1157)
• CVE-2026-0723 (T1045)
• CVE-2015-2502 (T1608.005)
• CVE-2015-7755 (T1608.005)
• CVE-2015-3636 (T1157)
• CVE-2013-0074 (T1608.005)
• CVE-2013-2551 (T1608.005)
• CVE-2012-1876 (T1608.005)
• CVE-2015-0071 (T1547.002)
• CVE-2015-1761 (T1157)
• CVE-2012-0611 (T1608.005)
• CVE-2008-1436 (T1157)
• CVE-2015-1770 (T1199)
• CVE-2014-6352 (T1199)
• CVE-2012-1856 (T1157)
• CVE-2015-2546 (T1157)
• CVE-2015-5897 (T1157)
• CVE-2015-3456 (T1157)
• CVE-2015-4495 (T1157)
• CVE-2013-2094 (T1157)
• CVE-2014-4113 (T1157)
• CVE-2015-7808 (T1157)
• CVE-2016-1990 (T1157)
• CVE-2016-1019 (T1157)
• CVE-2015-1701 (T1157)
• CVE-2015-3628 (T1157)
• CVE-2015-6034 (T1157)
• CVE-2015-7262 (T1157)
• CVE-2017-0263 (T1157)
• CVE-2016-9496 (T1157)
• CVE-2015-0016 (T1157)
• CVE-2010-3081 (T1157)
• CVE-2012-1258 (T1157)
• CVE-2014-3153 (T1157)
• CVE-2014-4322 (T1157)
• CVE-2010-0188 (T1157)
• CVE-2012-4681 (T1157)
• CVE-2014-1776 (T1157)
• CVE-2015-0057 (T1157)
• CVE-2013-3660 (T1157)
• CVE-2015-2360 (T1157)
• CVE-2010-0738 (T1157)
• CVE-2010-4398 (T1157)
• CVE-2012-6422 (T1157)
• CVE-2013-2595 (T1157)
• CVE-2015-2387 (T1157)
• CVE-2011-1255 (T1157)
• CVE-2017-0001 (T1547.002)
• CVE-2023-1389 (T1157)
• CVE-2025-13927 (T1157)
• CVE-2025-13928 (T1157)
• CVE-2025-24893 (T1157)
• CVE-2025-31125 (T1157)
• CVE-2025-55183 (T1157)
• CVE-2025-68645 (T1157)
• CVE-2026-1102 (T1157)
• CVE-2026-20127 (T1157)
• CVE-2017-0143 (T1547.002)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る