IRIran (Islamic Republic of)confidence: 50

BANISHED KITTENBANISHED KITTEN

Also known as: DUNE · Storm-0842 · Red Sandstorm · BANISHED KITTEN

Origin
IR
Known aliases
4
Target sectors
9
Attribution
State-sponsored

Profile

BANISHED KITTEN is an Iranian state-nexus adversary active since at least 2008. While the adversary’s most prominent activity is the July and September 2022 disruptive attacks targeting Albanian government infrastructure and the use of the HomelandJustice persona to leak stolen data, BANISHED KITTEN has likely targeted dissidents using the AllinOneNeo malware family.

Aliases· 4

DUNEStorm-0842Red SandstormBANISHED KITTEN

Target sectors· 9

GovernmentHealthcarePharmaceuticalsHigh-TechTelecommsEducationMediaNGOsCivil Society

Known victims· 4

  • United States
  • Israel
  • Middle East
  • Europe

Incident types

EspionageInformation OperationsSabotage

References

  1. https://www.crowdstrike.com/adversaries/banished-kitten/
  2. https://services.google.com/fh/files/misc/tool-of-first-resort-israel-hamas-war-cyber.pdf

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
Fox Kitten
Actor
TRACER KITTEN
Actor
Flash Kitten
Actor
RedKitten
Actor
Domestic Kitten
Actor
Ferocious Kitten
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.