IRIDIUM is a threat actor attributed to IR, also known as Seashell Blizzard, Sandworm, Quedagh. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does IRIDIUM exploit?

IRIDIUM is known to exploit 7 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

IRIDIUM

Also known as: Seashell Blizzard, Sandworm, Quedagh, VOODOO BEAR, TEMP.Noble, IRON VIKING, G0034, ELECTRUM, TeleBots, IRIDIUM, Blue Echidna, FROZENBARENTS, UAC-0113, UAC-0082, APT44, BE2, PHANTOM, BlackEnergy Lite, UAC-0133, Sandworm Team, Phantom, Telebots, BlackEnergy (Group), Voodoo Bear, Iron Viking, CTG-7263, ATK 14, UAC-0125, APT 44, Grey Tornado, Razing Ursa, Curly COMrades, GRU military unit 74455, UNC3810, Hades, SANDWORM RELIC

IRInformation theft and espionage

Exploited CVEs

Overview

Resecurity’s research indicates that the attack on Parliament is a part of a multi-year cyberespionage campaign orchestrated by a nation-state actor whom we are calling IRIDIUM. This actor targets sensitive government, diplomatic, and military resources in the countries comprising the Five Eyes intelligence alliance (which includes Australia, Canada, New Zealand, the United Kingdom and the United States)

Exploited Vulnerabilities

CVE ID	Action
CVE-2019-10149	View Details