Cleaver — APT Profile
Cleaver is a threat group that has been attributed to Iranian actors and is responsible for activity tracked as Operation Cleaver. Strong circumstantial evidence suggests Cleaver is linked to Threat Group 2889 (TG-2889).Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Also tracked as
Threat Group 2889, TG-2889
Tools & malware
- Mimikatz Credential Harvesting
- Net Crawler Network Reconnaissance
- PsExec Remote Execution
- TinyZBot Backdoor
Vendor research
- Suspected Iran-Based Hacker Group Creates Network of Fake LinkedIn Profiles Dell SecureWorks
- Operation Cleaver Cylance
- Suspected Iran-Based Hacker Group Creates Network of Fake LinkedIn Profiles Dell
Countries linked to this actor
- Kuwait targets