apt

Domestic Kitten

activeAttribution: ModeratePlausible and partly corroborated — some gaps or single-source elements.

APT / State-sponsored

APT-C-50

Attribution

Iran — assessed state-directed (MOIS/IRGC), domestic-surveillance focus (medium confidence; no MITRE Group ID)

Origin

Iran

First seen

2016

Last active

2023

Motivation

Espionage

Attribution confidence

medium

MENA targeting

Iran, regional

Sectors

Mobile surveillance of dissidents, minorities, opposition

Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Iran, regional (Mobile surveillance of dissidents, minorities, opposition sectors).

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Related to

OilAlphaactorTechnique overlap
Project Raven (DarkMatter)actorTechnique overlap
Arid Viper (APT-C-23 / Desert Falcon)actorTechnique overlap

Uses

Audio CapturetechniqueATT&CK mapping
Location TrackingtechniqueATT&CK mapping
Protected User Data: Contact ListtechniqueATT&CK mapping
MasqueradingtechniqueATT&CK mapping
Protected User Data: SMS MessagestechniqueATT&CK mapping

Indicators

No indicators linked yet

IOC extraction runs nightly against new reporting on this actor. Check back after tomorrow's corpus refresh.

Useful?