Actors Insights|Latest update04/07/2026

Scarred Manticore

Named by Check PointSuspected state sponsor: Islamic Republic of Iran

Scarred Manticore is an Iranian MOIS-linked threat cluster active since at least 2019, jointly exposed by Check Point Research and Sygnia in 2023. The group is known for LIONTAIL — a sophisticated passive backdoor that hijacks Windows IIS HTTP.sys driver handling to evade detection — and targets government, military, telecommunications, and financial organizations across the Middle East. Mandiant tracks the same cluster as UNC1860 and assessed it serves as an initial access provider for other Iranian state actors. Microsoft tracks it as Storm-0861.

First Seen:Jan 2019
Last Seen:Mar 2026
Indexed Reports:1
Public IOCs:3
Cluster: Scarred ManticoreMisp: Scarred Manticore
also known as:
Scarred Manticore (Check Point)

Targeted Regions

Iraq
IQ
Iraq
Iraq
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Israel
IL
Israel
Israel
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jordan
JO
Jordan
Jordan
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Kuwait
KW
Kuwait
Kuwait
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Oman
OM
Oman
Oman
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
United Arab Emirates
AE
United Arab Emirates
United Arab Emirates
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jun 2020 ~ Oct 2023
Jan 2020Sep 2026

Targeted Sectors

FinancialGovernment Agencies and ServicesHuman RightsInformation TechnologyMilitaryTelecommunication

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.