SYMBOLCOMMON_NAMEaka. SYNONYMS

BANISHED KITTEN  (Back to overview)

aka: DUNE, Red Sandstorm, Storm-0842

BANISHED KITTEN is an Iranian state-nexus adversary active since at least 2008. While the adversary’s most prominent activity is the July and September 2022 disruptive attacks targeting Albanian government infrastructure and the use of the HomelandJustice persona to leak stolen data, BANISHED KITTEN has likely targeted dissidents using the AllinOneNeo malware family.


Associated Families

There are currently no families associated with this actor.


References
2024-02-08 ⋅ Google ⋅ Google Threat Analysis Group, Mandiant
Tool of First Resort: Israel-Hamas War in Cyber
APT42 BANISHED KITTEN Blackatom Cotton Sandstorm LYCEUM Molerats POLONIUM Tortoiseshell

Credits: MISP Project