Cotton Sandstorm
IranState-sponsoredUnknown
Observation period
0
Techniques
0
Reports
- Latest observed activity
- No dated reports available
- First observed
- —
Profile
Cotton Sandstorm is an Iranian threat actor involved in hack-and-leak operations. They have targeted various organizations, including the French satirical magazine Charlie Hebdo, where they obtained and leaked personal information of over 200,000 customers. The group has been linked to the Iranian government and has been sanctioned by the US Treasury
Relevance for Germany, Austria and Switzerland
medium
Assessment based on target countries according to MISP Galaxy (CFR Cyber Operations Tracker).
Target sectors according to source
- Government
- Finance
- High-Tech
- Telecoms
- NGOs
- Civil Society
- Rail
- Energy
Target countries according to source United States, Israel, Middle East, Europe
Aliases
- Emennet Pasargad
- Holy Souls
- MARNANBRIDGE
- NEPTUNIUM
- HAYWIRE KITTEN