Ferocious KittenThreat actor
Ferocious Kitten is an APT group that has been active against Persian-speaking individuals since 2015 and appears to be based in Iran. Although it has been active over a large timespan, the group has mostly operated under the radar until a lure document was uploaded to VirusTotal and was brought to public knowledge by researchers on Twitter.From MISP Galaxy
Last reported 3 months ago, by Recorded Future1 report
ATT&CK techniques
1 technique · each with the sentence it comes from- T1036Masquerading
“…hly likely a component of Iran’s broader surveillance ecosystem, using MarkiRAT malware distributed through fake Android applications masquerading as legitimate services such as VPNs and media tools to collect intelligence from Iranian targets.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Iran-Nexus TAG-182 Disseminates MarkiRAT Surveillance Tool“…round Intelligent Transfer Service (BITS), suggesting a credible relationship between TAG-182 and activity previously attributed to Ferocious Kitten.”
Thanks — we review every report.