Threat actor · G0052

CopyKittens

UnattributedNo public state or group attribution on record

CopyKittens is an Iranian cyber espionage group that has been operating since at least 2013. It has targeted countries including Israel, Saudi Arabia, Turkey, the U.S., Jordan, and Germany. The group is responsible for the campaign known as Operation Wilted Tulip.

MITRE ATT&CK Techniques

T1059.001 T1090 T1218.011 T1553.002 T1560.001 T1560.003 T1564.003 T1588.002

Associated Malware

Cobalt StrikeEmpireMatryoshkaTDTESS

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.