STAR Webcast: Dissecting BadBlood: an Iranian APT Campaign

  • Webcast Aired Thursday, 29 Apr 2021 11:00AM EST (29 Apr 2021 15:00 UTC)
  • Speakers: Katie Nickels, Josh Miller, Crista Giering

In late 2020, TA453 (which overlaps with Charming Kitten and Phosphorus) conducted a targeted credential phishing against medical researchers specializing in oncology, neurology, and genetic research. Dubbed BadBlood, this campaign marked a departure from typical TA453 targeting which has historically aligned with Islamic Revolutionary Guard Corps (IRGC) collection priorities, targeting dissidents, academics, diplomats, and journalists. In this webcast, Proofpoint researchers will walk through the BadBlood campaign, techniques used to research the campaign, and structured analytic techniques used while writing the report to ensure the most thorough analysis.