Nimbus Manticore, also tracked as GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549, is an Iranian state-backed hacking group known for cyber espionage operations targeting the Middle East, Africa, and South Asia. The group employs tailored phishing lures and custom malware, including backdoors and tunneling tools, to maintain covert access to victim networks.