IRIran (Islamic Republic of)confidence: 50G0130

Flying KittenFlying Kitten

Also known as: SaffronRose · Saffron Rose · AjaxSecurityTeam · Ajax Security Team · Group 26 · Sayad · Flying Kitten

Origin
IR
Known aliases
7
Target sectors
2
Attribution
State-sponsored

Profile

Flying Kitten is a Iranian-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as SaffronRose, Saffron Rose, AjaxSecurityTeam (and 3 more). Operational targeting focuses on the Military and Civil society sectors. Documented victim organisations include United States, Iranian internet activists. Original record: Activity: defense and aerospace sectors, also interested in targeting entities in the oil/gas industry.

Aliases· 7

SaffronRoseSaffron RoseAjaxSecurityTeamAjax Security TeamGroup 26SayadFlying Kitten

Target sectors· 2

MilitaryCivil society

Known victims· 2

  • United States
  • Iranian internet activists

MITRE ATT&CK Group crosswalk

G0130

References

  1. https://www.fireeye.com/content/dam/fireeye-www/global/en/current-threats/pdfs/rpt-operation-saffron-rose.pdf
  2. https://www.crowdstrike.com/blog/cat-scratch-fever-crowdstrike-tracks-newly-reported-iranian-actor-flying-kitten/
  3. https://www.cfr.org/interactive/cyber-operations/saffron-rose

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
Charming Kitten
Actor
Flash Kitten
Actor
Clever Kitten
Actor
Fox Kitten
Actor
CopyKittens
Actor
Magic Kitten
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.