Threat actor · G0130

Ajax Security Team

Operation Woolen-GoldfishAjaxTMRocket KittenFlying KittenOperation Saffron Rose

UnattributedNo public state or group attribution on record

Ajax Security Team is a group that has been active since at least 2010 and believed to be operating out of Iran. By 2014 Ajax Security Team transitioned from website defacement operations to malware-based cyber espionage campaigns targeting the US defense industrial base and Iranian users of anti-censorship technologies.

MITRE ATT&CK Techniques

T1056.001 T1105 T1204.002 T1555.003 T1566.001 T1566.003

Associated Malware

Havijsqlmap

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.