threat actor

APT33

unknownentity:threat_actor

Our analysis reveals that APT33 is a capable group that has carried out cyber espionage operations since at least 2013. We assess APT33 works at the behest of the Iranian government.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: apt33
kind: threat actor
status: unknown
aliases: APT 33 · ATK35 · BLEAK ION · COBALT TRINITY · Elfin · G0064 · HOLMIUM · MAGNALLIUM · Peach Sandstorm · Refined Kitten · TA451
jurisdictions: —
claims naming it: 0 · 0 attributions · 7 relations · 0 events

Identifiers

attack G0064via mitre-attack
misp-galaxy 4f69ec6d-cb6b-42af-b8e2-920a2aa4be10via misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatAPT33usesAutoIt backdoor
fetch —sha256 dc1639caa5501d72
rel_655btcintel:relations:655@v1 sha256:9bc30b00f0979455
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT33usesNanoCore
fetch —sha256 dc1639caa5501d72
rel_656btcintel:relations:656@v1 sha256:d27fba5c7759fcd6
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT33usesDEADWOOD
fetch —sha256 dc1639caa5501d72
rel_657btcintel:relations:657@v1 sha256:73f42791ddcafd55
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT33usesStoneDrill
fetch —sha256 dc1639caa5501d72
rel_658btcintel:relations:658@v1 sha256:45943a5226d5be0e
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT33usesPOWERTON
fetch —sha256 dc1639caa5501d72
rel_659btcintel:relations:659@v1 sha256:8002fe51a400fed0
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT33usesTURNEDUP
fetch —sha256 dc1639caa5501d72
rel_660btcintel:relations:660@v1 sha256:144e19f11054f511
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT33usesNETWIRE
fetch —sha256 dc1639caa5501d72
rel_661btcintel:relations:661@v1 sha256:b8d090565ba1b6d1
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.