SPECTRAL KITTEN is an Iranian state-nexus adversary active since at least 2019. Previously tracked as the ProfaneTalon activity cluster, the adversary’s activity is characterized by the deployment of its custom IPSecHelper implant and Apostle ransomware variant in disruptive operations. These intrusions are typically accompanied by aggressive “lock-and-leak” information operations, with the advers...