Product
RunwayML
- First Reported
- Sep 16, 2026
- Latest Reported
- Sep 16, 2026
Reported Context (3)
- actor tricks victims into opening malicious files disguised as legitimate applications (e.g., Pictory, RunwayML, Norton Antivirus, Telegram, Adobe Flash Player, KeePass), often suggesting they launch them on personal Government Agencies Warn of Iranian Hackers Using CHOSEN BRICK to Spy on Dissidents
- Alongside the MRI scan, the attackers have impersonated legitimate products including Pictory, RunwayML, Norton Antivirus, Telegram, Adobe Flash Player and KeePass. Agencies Warn of Iranian Spyware Campaign Using Fake MRI Lures to Target Dissidents
- Reported disguises include the AI video app Pictory, the password manager KeePass, Telegram itself, RunwayML, Norton Antivirus, and Adobe Flash Player. Iran-Linked HEAVYGRAM Malware Uses Telegram to Spy on Dissidents and Journalists
Malware (2)
People (2)
Threat Actors (4)
MITRE ATT&CK (15)
Products (8)
Tools (1)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.