G0052

G0052CopyKittens

Description

[CopyKittens](https://attack.mitre.org/groups/G0052) is an Iranian cyber espionage group that has been operating since at least 2013. It has targeted countries including Israel, Saudi Arabia, Turkey, the U.S., Jordan, and Germany. The group is responsible for the campaign known as Operation Wilted Tulip.(Citation: ClearSky CopyKittens March 2017)(Citation: ClearSky Wilted Tulip July 2017)(Citation: CopyKittens Nov 2015)

References

  1. https://attack.mitre.org/groups/G0052
  2. http://www.clearskysec.com/wp-content/uploads/2017/07/Operation_Wilted_Tulip.pdf
  3. http://www.clearskysec.com/copykitten-jpost/
  4. https://s3-eu-west-1.amazonaws.com/minervaresearchpublic/CopyKittens/CopyKittens.pdf

Software attributed to this1

TypeTargetConfidenceTier
SoftwareTDTESSs0164100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Group
Charming Kitten
Group
Ferocious Kitten
Group
Fox Kitten
Actor
Magic Kitten
Actor
Cutting Kitten
Actor
Flash Kitten
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.