CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

POLONIUM

January 8, 2024

[POLONIUM](https://attack.mitre.org/groups/G1005) is a Lebanon-based group that has primarily targeted Israeli organizations, including critical manufacturing, information technology, and defense industry companies, since at least February 2022. Security researchers assess [POLONIUM](https://attack.mitre.org/groups/G1005) has coordinated their operations with multiple actors affiliated with Iran’s Ministry of Intelligence and Security (MOIS), based on victim overlap as well as common techniques and tooling.(Citation: Microsoft POLONIUM June 2022)

Aliases: POLONIUM, Plaid Rain

MITRE ATT&CK ID: G1005

View on MITRE ATT&CK