Spectral Kitten

Iran

Details

SPECTRAL KITTEN is an Iranian state-nexus adversary active since at least 2019. Previously tracked as the ProfaneTalon activity cluster, the adversary’s activity is characterized by the deployment of its custom IPSecHelper implant and Apostle ransomware variant in disruptive operations. In late January 2024, a UK-based Iranian-opposition news outlet revealed the identities of operators allegedly b...

Community Identifiers

sxGeMuNVPgn0D9r

Objective

  • Q5zyT8hdeGC7

Motivation

  • EAHMnSVop9yTbj2

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.