coldbraid

CopyKittens

CopyKittens is an Iranian cyber espionage group that has been operating since at least 2013. It has targeted countries including Israel, Saudi Arabia, Turkey, the U.S., Jordan, and Germany. The group is responsible for the campaign known as Operation Wilted Tulip.

ATT&CK ID
G0052
Origin
Iran
Techniques
7
Tools
4

Techniques

Resource Development

Obtain Capabilities

Execution

Command and Scripting Interpreter

Stealth

System Binary Proxy ExecutionHide Artifacts

Defense Impairment

Subvert Trust Controls

Collection

Archive Collected Data

Command and Control

Proxy

Software

Cobalt Strike · Empire · Matryoshka · TDTESS