Threat intelligence / Malware

Meteor

[Meteor](https://attack.mitre.org/software/S0688) is a wiper that was used against Iranian government organizations, including Iranian Railways, the Ministry of Roads, and Urban Development systems, in July 2021. [Meteor](https://attack.mitre.org/software/S0688) is likely a newer version of similar wipers called Stardust and Comet that were reportedly used by a group called "Indra" since at least 2019 against private companies in Syria.(Citation: Check Point Meteor Aug 2021)

Malware

TypeMalware

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[Meteor](https://attack.mitre.org/software/S0688) is a wiper that was used against Iranian government organizations, including Iranian Railways, the Ministry of Roads, and Urban Development systems, in July 2021. [Meteor](https://attack.mitre.org/software/S0688) is likely a newer version of similar wipers called Stardust and Comet that were reportedly used by a group called "Indra" since at least 2019 against private companies in Syria.(Citation: Check Point Meteor Aug 2021)

Labels

malware

20 recorded

Relationships

uses

to Account Access Removal

Technique

uses

to Clear Windows Event Logs

Technique

uses

to Data Destruction

Technique

uses

to Disable or Modify Tools

Technique

uses

to File Deletion

Technique

uses

to Group Policy Modification

Technique

uses

to Hidden Window

Technique

uses

to Ingress Tool Transfer

Technique

uses

to Inhibit System Recovery

Technique

uses

to Internal Defacement

Technique

uses

to Masquerade Task or Service

Technique

uses

Technique

uses

Technique

uses

to Process Discovery

Technique

uses

to Scheduled Task

Technique

uses

to Security Software Discovery

Technique

uses

to Service Stop

Technique

uses

to System Information Discovery

Technique

uses

to Windows Command Shell

Technique

uses

to Windows Management Instrumentation

Technique

2 external

References

mitre-attack

S0688

Check Point Meteor Aug 2021

https://research.checkpoint.com/2021/indra-hackers-behind-recent-attacks-on-iran/