misp-galaxy:microsoft-activity-group="Mint Sandstorm",misp-galaxy:threat-actor="APT35",misp-galaxy:target-information="Belgium",misp-galaxy:target-information="France",misp-galaxy:target-information="Israel",misp-galaxy:target-information="United Kingdom",misp-galaxy:target-information="United States",misp-galaxy:sector="Academia - University",misp-galaxy:sector="Research - Innovation",misp-galaxy:country="iran",misp-galaxy:mitre-attack-pattern="Spear phishing messages with malicious links - T1369",misp-galaxy:sigma-rules="Suspicious Double Extension Files",misp-galaxy:sigma-rules="PUA - NirCmd Execution",tlp:white