APT33
threat actorIR01
also known as
Other names and identifiers for this entity.
ATT&CK
APT33 · Elfin · HOLMIUM · Peach Sandstorm
MISP
APT33 · ATK35 · BLEAK ION · COBALT TRINITY · Elfin · HOLMIUM · MAGNALLIUM · Peach Sandstorm · Refined Kitten · TA451
Our analysis reveals that APT33 is a capable group that has carried out cyber espionage operations since at least 2013. We assess APT33 works at the behest of the Iranian government.
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (34)
ATT&CK techniques this enables or maps to.
showing 20 of 34
04
software used (16)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.
- https://www.fireeye.com/blog/threat-research/2017/09/apt33-insights-into-iranian-cyber-espionage.html
- https://blog.trendmicro.com/trendlabs-security-intelligence/more-than-a-dozen-obfuscated-apt33-botnets-used-for-extreme-narrow-targeting/
- https://www.brighttalk.com/webcast/10703/275683
- https://symantec-blogs.broadcom.com/blogs/threat-intelligence/elfin-apt33-espionage
- https://www.secureworks.com/research/threat-profiles/cobalt-trinity
- https://attack.mitre.org/groups/G0064/
- https://threatconnect.com/blog/research-roundup-activity-on-previously-identified-apt33-domains/
- https://www.cfr.org/interactive/cyber-operations/apt-33