Ajax Security Team — APT Profile
Ajax Security Team is a group that has been active since at least 2010 and believed to be operating out of Iran. By 2014 Ajax Security Team transitioned from website defacement operations to malware-based cyber espionage campaigns targeting the US defense industrial base and Iranian users of anti-censorship technologies.Also tracked as
Operation Woolen-Goldfish, AjaxTM, Rocket Kitten, Flying Kitten, Operation Saffron Rose
Tools & malware
Vendor research
- OPERATION SAFFRON ROSE Villeneuve, N. et al.
- Operation Woolen-Goldfish - When Kittens Go phishing TrendMicro
- ROCKET KITTEN: A CAMPAIGN WITH 9 LIVES Check Point
- Cat Scratch Fever: CrowdStrike Tracks Newly Reported Iranian Actor as FLYING KITTEN Crowdstrike
- Flying Kitten to Rocket Kitten, A Case of Ambiguity and Shared Code IranThreats Kittens
- OPERATION SAFFRON ROSE FireEye