Nimbus Manticore, also known as GalaxyGato, Mirage Kitten, Screening Serpens, Smoke Sandstorm, Subtle Snail, and UNC1549, is an Iranian state-sponsored hacking group affiliated with the IRGC. It is linked to Tortoiseshell and part of the Charming Kitten cluster. The group has been active in cyber espionage, conducting campaigns like Dream Job and developing sophisticated malware to target defense, aerospace, and IT sectors in the Middle East and beyond.