IRIran (Islamic Republic of)confidence: 50
Cotton SandstormCotton Sandstorm
Also known as: Emennet Pasargad · Holy Souls · MARNANBRIDGE · NEPTUNIUM · HAYWIRE KITTEN · Cotton Sandstorm
Origin
IR
Known aliases
6
Target sectors
8
Attribution
State-sponsored
Profile
Cotton Sandstorm is an Iranian threat actor involved in hack-and-leak operations. They have targeted various organizations, including the French satirical magazine Charlie Hebdo, where they obtained and leaked personal information of over 200,000 customers. The group has been linked to the Iranian government and has been sanctioned by the US Treasury
Aliases· 6
Emennet PasargadHoly SoulsMARNANBRIDGENEPTUNIUMHAYWIRE KITTENCotton Sandstorm
Target sectors· 8
GovernmentFinanceHigh-TechTelecomsNGOsCivil SocietyRailEnergy
Known victims· 4
- United States
- Israel
- Middle East
- Europe
References
- https://blog.sekoia.io/iran-cyber-threat-overview/
- https://blogs.microsoft.com/on-the-issues/2023/02/03/dtac-charlie-hebdo-hack-iran-neptunium/
- https://www.ic3.gov/Media/News/2022/220126.pdf
- https://www.microsoft.com/en-us/security/business/security-insider/threat-briefs/iran-response-for-charlie-hebdo-attacks/
- https://services.google.com/fh/files/misc/tool-of-first-resort-israel-hamas-war-cyber.pdf
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.