CopyKittens — APT Profile
CopyKittens is an Iranian cyber espionage group that has been operating since at least 2013. It has targeted countries including Israel, Saudi Arabia, Turkey, the U.S., Jordan, and Germany. The group is responsible for the campaign known as Operation Wilted Tulip.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Also tracked as
Slayer Kitten, G0052
Tools & malware
- Cobalt Strike Adversary Simulation
- Empire Post-Exploitation Framework
- Matryoshka Backdoor
- TDTESS Backdoor
Vendor research
- CopyKittens Attack Group Minerva Labs LTD and ClearSky Cyber Security
- Operation Wilted Tulip: Exposing a cyber espionage apparatus ClearSky
- Jerusalem Post and other Israeli websites compromised by Iranian threat agent CopyKitten ClearSky
- CopyKittens Attack Group CopyKittens