SYMBOLCOMMON_NAMEaka. SYNONYMS

DEV-0270  (Back to overview)

aka: Nemesis Kitten, Storm-0270

Microsoft threat intelligence teams have been tracking multiple ransomware campaigns and have tied these attacks to DEV-0270, also known as Nemesis Kitten, a sub-group of Iranian actor PHOSPHORUS. Microsoft assesses with moderate confidence that DEV-0270 conducts malicious network operations, including widespread vulnerability scanning, on behalf of the government of Iran.


Associated Families

There are currently no families associated with this actor.


References
2022-09-07 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Profiling DEV-0270: PHOSPHORUS’ ransomware operations
LaZagne Mamba MimiKatz APT35 DEV-0270

Credits: MISP Project