Knowledge/Actors/CadelleCorpus

+ Request intel workspace

apt

Cadelle

Attribution: ModeratePlausible and partly corroborated — some gaps or single-source elements.

APT / State-sponsored

Cadelle

Attribution

Iran — assessed state-aligned surveillance (low-medium confidence; single primary source, no MITRE Group ID)

Origin

Iran

First seen

2014

Last active

2015

Motivation

Espionage

Attribution confidence

medium

MENA targeting

Iran, Saudi Arabia

Sectors

Individuals/surveillance

Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Iran, Saudi Arabia (Individuals/surveillance sector).

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

No open hunts or recent alerts tracked against this actor right now.

Associated with

Related to

Madi / MahdiactorTechnique overlap
Flame / FlameractorTechnique overlap
Ferocious KittenactorTechnique overlap
Arid Viper (APT-C-23 / Desert Falcon)actorTechnique overlap
APT39 / ChaferactorTechnique overlap
OilRig (APT34)actorTechnique overlap
Void Manticore (Storm-0842)actorTechnique overlap

Uses

Input Capture: KeyloggingtechniqueATT&CK mapping
Clipboard DatatechniqueATT&CK mapping
Data from Local SystemtechniqueATT&CK mapping
Audio CapturetechniqueATT&CK mapping
Data from Removable MediatechniqueATT&CK mapping
Screen CapturetechniqueATT&CK mapping

Overview Attribution² TTPs⁶ Indicators Reporting Coverage

Indicators

No indicators linked yet

IOC extraction runs nightly against new reporting on this actor. Check back after tomorrow's corpus refresh.

Useful?

Related

Semantically related in the corpus — a discovery aid, not asserted attribution.

ActorAPT39 / Chafer
ActorOilRig (APT34)
ActorCopyKittens
ActorHEXANE (Lyceum)
ActorMuddyWater
ActorGroup5