ID | Votes | Profile Description |
---|---|---|
Charming Kitten | 6 | Charming Kitten, also known as APT42, Storm-2035, Damselfly, Mint Sandstorm, TA453, and Yellow Garuda, is an Iranian threat actor group that has been linked to various cyber attacks. It has targeted entities in Brazil, Israel, and the United Arab Emirates using a new backdoor, as revealed by securit |
Apt42 | 4 | APT42, also known as Charming Kitten and CharmingCypress, is an Iran-nexus advanced persistent threat (APT) group known for its sophisticated and persistent cyber-attack strategies. The group has recently targeted Middle East policy experts in the region, as well as in the US and Europe, using a pho |
Phosphorus | 4 | Phosphorus, also known as APT35 or Charming Kitten, is a notorious Iranian cyberespionage group linked to the Islamic Revolutionary Guard Corps (IRGC). This threat actor has been involved in a series of malicious activities, employing novel tactics and tools. A significant discovery was made by the |
APT35 | 3 | APT35, also known as the Newscaster Team, Charming Kitten, and Mint Sandstorm, is an Iranian government-sponsored cyber espionage group. The group focuses on long-term, resource-intensive operations to collect strategic intelligence. They primarily target sectors in the U.S., Western Europe, and the |
Mint Sandstorm | 3 | Mint Sandstorm, an Advanced Persistent Threat (APT) group linked to Iran's Islamic Revolutionary Guard Corps (IRGC), has been identified as a significant cyber threat actor. This group is known for its highly skilled operators and sophisticated social engineering techniques, often lacking the typica |
COBALT ILLUSION | 3 | Cobalt Illusion, also known as Mint Sandstorm, APT42, and TA453 among other names, is a threat actor known for its sophisticated social engineering campaigns. This group is associated with the Islamic Revolutionary Guard Corps and is recognized for conducting surveillance and espionage activities ag |
Yellow Garuda | 2 | Yellow Garuda, also known as Charming Kitten, APT35, Mint Sandstorm, Cobalt Illusion, and TA453 among other names, is a threat actor believed to be operating on behalf of Iran's Islamic Revolutionary Guard Corps (IRGC). The group has been active in various cyber espionage campaigns over the years. I |
ID | Type | Votes | Profile Description |
---|---|---|---|
GorjolEcho | Unspecified | 2 | GorjolEcho is a sophisticated malware, identified by Proofpoint and attributed with high confidence to the Iranian group TA453, based on code similarities with previously recognized malware such as GhostEcho, CharmPower, and MacDownloader. The malware is delivered via a new infection chain involving |
Noknok | Unspecified | 2 | NokNok is a malicious software (malware) developed by the Iranian hacking group APT35, also known as Charming Kitten. It was discovered after the group targeted a US-based nuclear security expert with a sophisticated phishing attack. The attackers initiated several non-threatening email interactions |
ID | Type | Votes | Profile Description |
---|---|---|---|
Seaborgium | Unspecified | 2 | Seaborgium, also known as Star Blizzard, Callisto Group, COLDRIVER, and TAG-53, is a threat actor linked to suspected Russian threat activity groups. Open-source reporting has enabled Insikt Group to profile the infrastructure used by this group, revealing significant overlaps with other known malic |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
Checkpoint | 12 days ago | 26th August – Threat Intelligence Report - Check Point Research | |
InfoSecurity-magazine | 18 days ago | Iranian Group TA453 Launches Phishing Attacks with BlackSmith | |
DARKReading | 18 days ago | IRGC-Linked Hackers Roll Malware into Monolithic Trojan | |
SecurityIntelligence.com | 4 months ago | Threat intelligence to protect vulnerable communities | |
CERT-EU | 10 months ago | Pro-Palestinian hacking group evolves tactics amid war | |
CERT-EU | a year ago | Cyber Security Week in Review: September 15, 2023 | |
CERT-EU | a year ago | ‘Scan-and-exploit’ campaign snares unpatched Exchange servers | |
CERT-EU | a year ago | Iranian hackers target orgs in Brazil, Israel, and OAE with new Sponsor backdoor | |
CERT-EU | a year ago | Iranian Charming Kitten APT targets various entities in Brazil, Israel, and the U.A.E. using a new backdoor | |
BankInfoSecurity | a year ago | Feds Urge Immediate Patching of Zoho and Fortinet Products | |
BankInfoSecurity | a year ago | Feds Urge Immediately Patching of Zoho and Fortinet Products | |
CERT-EU | a year ago | Les dernières cyberattaques détectées | 11 juillet 2023 | |
DARKReading | a year ago | APT35 Develops Mac Bespoke Malware | |
CERT-EU | a year ago | Security Affairs newsletter Round 427 by Pierluigi Paganini – International edition | IT Security News | |
CERT-EU | a year ago | L’hebdo cybersécurité | 8 juillet 2023 | |
CERT-EU | a year ago | Iran-linked APT TA453 targets Windows and macOS systems | IT Security News | |
Securityaffairs | a year ago | Iran-linked APT TA453 targets Windows and macOS systems | |
CERT-EU | a year ago | Iranian Hackers' Sophisticated Malware Targets Windows and macOS Users | |
BankInfoSecurity | a year ago | Breach Roundup: Iranian Group Targets Nuclear Experts | |
CERT-EU | a year ago | Iranian hackers targeted nuclear expert, ported Windows infection chain to Mac in a week - TechCentral.ie |