Cleaver — APT Profile
Cleaver is a threat group that has been attributed to Iranian actors and is responsible for activity tracked as Operation Cleaver. Strong circumstantial evidence suggests Cleaver is linked to Threat Group 2889 (TG-2889).Also tracked as
Threat Group 2889, TG-2889
Tools & malware
- Mimikatz Credential Harvesting
- Net Crawler Network Reconnaissance
- PsExec Remote Execution
- TinyZBot Backdoor