threat actor

Cleaver

unknownentity:threat_actor

A group of cyber actors utilizing infrastructure located in Iran have been conducting computer network exploitation activity against public and private U.S. organizations, including Cleared Defense Contractors (CDCs), academic institutions, and energy sector companies. This threat actor targets entities in the government, energy, and technology sectors that are located in or do business with Saudi Arabia.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: cleaver
kind: threat actor
status: unknown
aliases: Alibaba · APT 34 · APT34 · ATK40 · CHRYSENE · Cobalt Gypsy · Crambus · Earth Simnavaz · EUROPIUM · Evasive Serpens · G0003 · G0049 · Greenbug · Hazel Sandstorm · Helix Kitten · IRN2 · OilRig · Op Cleaver · Operation Cleaver · SOLAR ION · TA452 · Tarh Andishan · TG-2889 · Threat Group 2889 · Twisted Kitten
jurisdictions: —
claims naming it: 0 · 0 attributions · 2 relations · 0 events

Identifiers

attack G0003via mitre-attack
misp-galaxy 42be2a84-5a5c-4c6d-9864-3f09d75bb0bavia misp-galaxy-threat-actor
misp-galaxy 47204403-34c9-4d25-a006-296a0939d1a2via misp-galaxy-threat-actor
misp-galaxy 86724806-7ec9-4a48-a0a7-ecbde3bf4810via misp-galaxy-threat-actor
misp-galaxy a0082cfa-32e2-42b8-92d8-5c7a7409dcf1via misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatCleaverusesNet Crawler
fetch —sha256 dc1639caa5501d72
rel_435btcintel:relations:435@v1 sha256:f80a40ed006568f3
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatCleaverusesTinyZBot
fetch —sha256 dc1639caa5501d72
rel_436btcintel:relations:436@v1 sha256:f3c7cf156db77d9f
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.