A suspected Iran-based threat actor known for conducting long-running spear phishing campaigns.
Flash Kitten is a suspected Iran-based threat actor that conducted long-running SWC (Spear Phishing Campaign) operations from December 2016 until public disclosure in July 2018. The actor primarily targets entities within the MENA region, consistent with patterns seen in other Iran-based adversaries. No specific tools, C2 infrastructure, or distinct TTPs beyond spear phishing are detailed in the provided intelligence. Defenders should focus on scrutinizing targeted phishing emails directed at personnel or operations tied to the MENA region.
This suspected Iran-based adversary conducted long-running SWC campaigns from December 2016 until public disclosure in July 2018. Like other Iran-based actors, the target scope for FLASH KITTEN appears to be focused on the MENA region.
Flash Kitten primarily targeted victims in the MENA region.
Flash Kitten is characterized by long-running SWC (Spear Phishing Campaign) operations.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.