| SYMBOL | COMMON_NAME | aka. SYNONYMS |
A group of cyber actors utilizing infrastructure located in Iran have been conducting computer network exploitation activity against public and private U.S. organizations, including Cleared Defense Contractors (CDCs), academic institutions, and energy sector companies. This threat actor targets entities in the government, energy, and technology sectors that are located in or do business with Saudi Arabia.
| 2021-05-06 ⋅ xorl %eax, %eax ⋅ Iran Cyber Operations Groups Cleaver |
| 2020 ⋅ Secureworks ⋅ COBALT GYPSY TwoFace MacDownloader BONDUPDATER pupy Helminth jason RGDoor TinyZbot OilRig |
| 2019-04-08 ⋅ SANS Cyber Security Summit ⋅ Trails of WindShift WindTail ZhMimikatz |
| 2019-03-27 ⋅ Microsoft ⋅ New steps to protect customers from hacking APT35 Charming Kitten Cleaver |
| 2019 ⋅ Council on Foreign Relations ⋅ Magic Hound APT35 Cleaver |
| 2019 ⋅ Council on Foreign Relations ⋅ Operation Cleaver Cleaver |
| 2019 ⋅ MITRE ⋅ Group description: Magic Hound APT35 Cleaver |
| 2019 ⋅ MITRE ⋅ Group description: Cleaver Cleaver |
| 2017-07-27 ⋅ Secureworks ⋅ The Curious Case of Mia Ash: Fake Persona Lures Middle Eastern Targets Cleaver |
| 2017-02-15 ⋅ Palo Alto Networks Unit 42 ⋅ Magic Hound Campaign Attacks Saudi Targets APT35 Cleaver |
| 2017-02-15 ⋅ Secureworks ⋅ Iranian PupyRAT Bites Middle Eastern Organizations pupy Cleaver |
| 2016-04-06 ⋅ Cylance ⋅ Operation Cleaver Cleaver |
| 2016-04-06 ⋅ Cylance ⋅ Operation Cleaver CsExt Jasus KAgent NetC PvzOut SynFlooder TinyZbot WndTest ZhCat ZhMimikatz Cleaver |
| 2015-11 ⋅ Check Point ⋅ ROCKET KIT TEN: A CAMPAIGN WITH 9 LIVES FireMalv MPKBot Woolger Cleaver Rocket Kitten |
| 2015-10-07 ⋅ Dell Secureworks ⋅ Hacker Group Creates Network of Fake LinkedIn Profiles Cleaver |
| 2015-10-07 ⋅ Secureworks ⋅ Hacker Group Creates Network of Fake LinkedIn Profiles Cleaver Cutting Kitten |
| 2015-10-06 ⋅ Netenrich ⋅ CUTTING KITTEN TinyZbot Cleaver |
| 2015-09-01 ⋅ Trend Micro ⋅ The Spy Kittens Are Back:Rocket Kitten 2 Cleaver |
| 2015-03-19 ⋅ Trend Micro ⋅ Rocket Kitten Showing Its Claws: Operation Woolen-GoldFish and the GHOLE campaign Cleaver Rocket Kitten |
| 2015-02-17 ⋅ SecurityAffairs ⋅ Ali Baba, the APT group from the Middle East Cleaver |
| 2014 ⋅ Council on Foreign Relations ⋅ Operation Cleaver Cleaver |