threat actor
LYCEUM
Lyceum is an Iranian APT group that has been active since at least 2014. They primarily target Middle Eastern governments and organizations in the energy and telecommunications sectors. Lyceum is known for using cyber espionage techniques and has been linked to other Iranian threat groups such as APT34. They have developed and deployed malware families like Shark and Milan, and have been observed using DNS tunneling and HTTPfor command and control communication.
Curated · btcintel
claims we make, each with its source and citation · sources may contradict; we show the set, never a score
Facts
- id
- lyceum
- kind
- threat actor
- status
- unknown
- aliases
- Chrono Kitten · COBALT LYCEUM · HEXANE · MYSTICDOME · siamesekitten · Spirlin · Storm-0133 · UNC1530
- jurisdictions
- —
- claims naming it
- 0 · 0 attributions · 0 relations · 0 events
Identifiers
- misp-galaxy e1b95185-8db6-4f3c-9ffd-1749087d934avia misp-galaxy-threat-actor
Relations
computedno relations recorded for this entity
Events
computedno dated events recorded for this entity
Claims naming this entity
computedno current claim names this entity
Subjects0 subjects carry a claim naming this entity · a sample
computedno subject carries a claim naming this entity
Community
notes from Nostr labelers · never merged with the bands above · not endorsed
Community content is indexed from Nostr and not endorsed by btcintel.
not computed yetNot indexed yet: the community index has not looked at this subject.