BANISHED KITTEN
BANISHED KITTEN is classified as state-sponsored.
- Suspected state sponsor
- Iran
- Also known as
- 3
BANISHED KITTEN is an Iranian state-nexus adversary active since at least 2008. While the adversary’s most prominent activity is the July and September 2022 disruptive attacks targeting Albanian government infrastructure and the use of the HomelandJustice persona to leak stolen data, BANISHED KITTEN has likely targeted dissidents using the AllinOneNeo malware family.
The group is suspected of operating with the support of Iran.
Also known as: DUNE, Storm-0842, Red Sandstorm
Published reports on this actor:
- https://www.crowdstrike.com/adversaries/banished-kitten/
- https://services.google.com/fh/files/misc/tool-of-first-resort-israel-hamas-war-cyber.pdf
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.