Rocket Kitten is an Iranian state-sponsored cyber espionage group that first emerged around mid-2014, although its predecessors like Ajax Security Team were active as early as 2010. The group's primary motivation is intelligence gathering, aligning with Iranian political and military interests, rather than financial gain. Their operations are characterized by a persistent focus on spear phishing and social engineering to obtain sensitive information. A defining incident was the exposure of their backend database, "Oyun," in 2015, which allowed researchers to gain significant insight into their operations, including target lists and internal tools. Rocket Kitten is also known by aliases such as Operation Woolen Goldfish, Thamar Reservoir, and TEMP.Beanie, and has shown a pattern of making minor operational security errors.