Scarred Manticore

Origin
IR
Primary motivation
espionage
Sophistication
advanced
Resource level
government
Actor type
nation-state
Profile updated
2026-07-07 12:04:48

Targeted industries: government-and-public-sector technology-and-telecommunications financial-services

Targeted regions: country_code:us country_code:ru country_code:cn

Context

Scarred Manticore has been pursuing high-value targets for years, utilizing a variety of IIS-based backdoors to attack Windows servers. These include a variety of custom web shells, custom DLL backdoors, and driver-based implants.

Reports & references

  • research.checkpoint.com — From Albania To The Middle East The Scarred Manticore Is Listening (report)

External references