Tool
NordVPN
- First Reported
- Apr 6, 2026
- Latest Reported
- Apr 6, 2026
Reported Context (1)
- Attackers scanned via rotating Tor exit nodes, used Windscribe and NordVPN endpoints geolocated in Israel to bypass geo-fencing, and leveraged valid logins to access and exfiltrate municipal emails, a pattern CPR Iran-Linked Password-Spraying Campaign Targeted Municipalities in Israel and the UAE
Threat Actors (1)
MITRE ATT&CK (3)
Vendors (1)
Products (1)
Tools (2)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.