RaqibCTI APT / State-sponsored
APT42Charming KittenMint SandstormTA453Educated ManticoreMagic HoundPhosphorus
Attribution
Iran — Islamic Revolutionary Guard Corps Intelligence Organization (IRGC-IO)
Attribution confidence
high
MENA targeting
Israel, Gulf states, broader Middle East
Sectors
Government, media, NGOs, academia, dissidents/activists
Why it mattersState-sponsored / APT actor, high confidence, documented targeting Israel, Gulf states, broader Middle East (Government, media, NGOs sectors).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.
Reporting history
11 reports · 0 publishersThird-party sources archived via ORKL — not RaqibCTI assessments. Reported since 2023-06-07.
B2026-03-25
2026_YIR_ExecutiveBriefing%20O_G.pdf?hsLang=en
C2025-11-05
2025 November GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
actor
Technique overlap
←APT33actorTechnique overlap ←2026_YIR_ExecutiveBriefing%20O_G.pdf?hsLang=enreportORKL2026-03-25←2025 November GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI ToolsreportORKL2025-11-05←Mandiant M-Trends 2025 ReportreportORKL2025-04-24←Iranian "Dream Job" campaignreportORKL2024-11-12←ESET APT Activity Report Q2 2024-Q3 2024reportORKL2024-11-07←GreenCharlie Infrastructure Linked to US Political Campaign TargetingreportORKL2024-08-19←Iran steps into US election 2024 with cyber-enabled influence operationsreportORKL2024-08-06←Israel-Hamas War in Cyber February 2024 Tool of First ResortreportORKL2024-02-08←2023 Adversary Infrastructure ReportreportORKL2024-01-08←2023 State of The Threat – A Year in ReviewreportORKL2023-09-29←The Human Factor 2023reportORKL2023-06-07Uses
- →Boot or Logon Autostart ExecutiontechniqueATT&CK mapping
C2025-04-24
Mandiant M-Trends 2025 Report
B2024-11-12
Iranian "Dream Job" campaign
B2024-11-07
ESET APT Activity Report Q2 2024-Q3 2024
A2024-08-19
GreenCharlie Infrastructure Linked to US Political Campaign Targeting
A2024-08-06
Iran steps into US election 2024 with cyber-enabled influence operations
C2024-02-08
Israel-Hamas War in Cyber February 2024 Tool of First Resort
A2024-01-08
2023 Adversary Infrastructure Report
B2023-09-29
2023 State of The Threat – A Year in Review
C2023-06-07
The Human Factor 2023