Cutting Kitten
0 incidentes
0 paises
0 sectores
apt IR Ultimo: -
Aliases: ITsecTeam
Cutting Kitten is a state-sponsored Iranian threat actor group that emerged in 2012 with its operations tracked as Operation Cleaver, and has since evolved into other groups such as Magic Hound, APT 35, Cobalt Illusion, and Charming Kitten. The group is attributed to Iranian actors and is associated with Amn Pardazesh Kharazmi, also known as ITSecTeam, which has ties to the Islamic Revolutionary Guard Corps. Its primary motivation is information theft, cyber espionage, and network disruption. The group is notable for its reliance on custom malware families for reconnaissance, data exfiltration, and network disruption, along with its initial focus on global surveillance and infiltration campaigns and the use of fake LinkedIn profiles for social engineering. Cutting Kitten operates under multiple names, including TG-2889 (SecureWorks) and G0003 (MITRE).