BANISHED KITTEN
Observation period
63
Techniques
0
Reports
- Latest observed activity
- No dated reports available
- First observed
- —
Profile
BANISHED KITTEN is an Iranian state-nexus adversary active since at least 2008. While the adversary’s most prominent activity is the July and September 2022 disruptive attacks targeting Albanian government infrastructure and the use of the HomelandJustice persona to leak stolen data, BANISHED KITTEN has likely targeted dissidents using the AllinOneNeo malware family.
Relevance for Germany, Austria and Switzerland
medium
Assessment based on target countries according to MISP Galaxy (CFR Cyber Operations Tracker).
Target sectors according to source
- Government
- Healthcare
- Pharmaceuticals
- High-Tech
- Telecomms
- Education
- Media
- NGOs
- Civil Society
Target countries according to source United States, Israel, Middle East, Europe
Aliases
- DUNE
- Storm-0842
- Red Sandstorm
MITRE ATT&CK techniques
Observed techniques per ATT&CK Enterprise and ICS. Each technique links to the ATT&CK knowledge base.
- T1113
- T1110.001
- T1119
- T1561.001
- T1486
- T1566
- T1589
- T1657
- T1102
- T1059.001
- T1047
- T1484.001
- T1564.003
- T1583.001
- T1123
- T1190
- T1114.002
- T1074
- T1078.002
- T1027.015
- T1684.001
- T1036.005
- T1679
- T1087.002
- T1588.001
- T1490
- T1072
- T1003.001
- T1651
- T1583.003
- T1583.006
- T1686.003
- T1552.002
- T1213.002
- T1219.002
- T1595.002
- T1561.002
- T1583.004
- T1105
- T1082
- T1078.004
- T1133
- T1588.002
- T1547.001
- T1204.002
- T1005
- T1098
- T1125
- T1572
- T1587.001
- T1585.002
- T1071.001
- T1199
- T1110.004
- T1585.001
- T1485
- T1078
- T1110
- T1036.004
- T1059.006
- T1560.001
- T1041
- T1021.001
ATT&CK campaigns
Linked ATT&CK campaign profiles in which this group is named as an actor.