apt

Imperial Kitten (CURIUM)

active · last signal 6mo agoAttribution: ModeratePlausible and partly corroborated — some gaps or single-source elements.

APT / State-sponsored

CURIUMTortoiseshellCrimson SandstormTA456Yellow LidercCuboid Sandstorm

Attribution

Iran-nexus espionage group assessed to support IRGC intelligence requirements

Origin

Iran

First seen

2019

Last active

2026

Motivation

Espionage

Attribution confidence

medium

MENA targeting

Israel (primary), broader Middle East tech sector

Sectors

Transportation, logistics, technology, maritime, telecom, defense

MITRE ATT&CK

G1012 ↗

Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Israel (primary), broader Middle East tech sector (Transportation, logistics, technology sectors).

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Related to

UNC1549 / TA455actorTechnique overlap
Dust SpecteractorTechnique overlap
BahamutactorTechnique overlap
Dark CaracalactorTechnique overlap
Void Manticore (Storm-0842)actorTechnique overlap
Rocket KittenactorTechnique overlap
SideWinderactorTechnique overlap
Ferocious KittenactorTechnique overlap
Arid Viper (APT-C-23 / Desert Falcon)

Indicators

No indicators linked yet

IOC extraction runs nightly against new reporting on this actor. Check back after tomorrow's corpus refresh.

Useful?

Madi / MahdiactorTechnique overlap

Stealth FalconactorTechnique overlap

WIRTEactorTechnique overlap

Infy / Prince of PersiaactorTechnique overlap

Emennet PasargadactorTechnique overlap

Storm-1133actorTechnique overlap

HEXANE (Lyceum)actorTechnique overlap

Cl0pactorTechnique overlap

Syrian Electronic ArmyactorTechnique overlap

Charming Kitten / APT42actorTechnique overlap

BladedFelineactorTechnique overlap

APT39 / ChaferactorTechnique overlap

Gaza Cybergang / MoleratsactorTechnique overlap

OilRig (APT34)actorTechnique overlap

Scarred Manticore (Storm-0861)actorTechnique overlap

MedusaactorTechnique overlap

Fox KittenactorTechnique overlap

MuddyWateractorTechnique overlap

Sea TurtleactorTechnique overlap

Tropic TrooperactorTechnique overlap

APT33actorTechnique overlap

Qilin (fka Agenda)actorTechnique overlap

2026_YIR_ExecutiveBriefing%20O_G.pdf?hsLang=enreportORKL2026-03-25

eset-apt-activity-report-q2-2025-q3-2025.pdfreportORKL2025-10-30

Investigating Iranian Intrusion into Strategic Middle East Critical InfrastructurereportORKL2025-03-07

Iranian "Dream Job" campaignreportORKL2024-11-12

Staying ahead of threat actors in the age of AIreportORKL2024-02-20

SentinelOne WatchTower Intelligence-Driven Threat Hunting End of Year 2023reportORKL2024-02-15

Israel-Hamas War in Cyber February 2024 Tool of First ResortreportORKL2024-02-08

+19 more relationships — see the relationships browser.