Banished Kitten

Banished Kitten is a CrowdStrike tracking designation for an Iranian-linked threat cluster active since at least 2022, with observed activity extending into 2026. The group operates within the broader landscape of Iranian state-sponsored cyber operations and follows CrowdStrike's Kitten naming convention for IRGC- or MOIS-linked actors. Banished Kitten's specific toolset, campaign targets, and definitive organizational attribution have not been fully detailed in public reporting. The designation is used to track a distinct operational pattern that has not yet been consolidated into an existing named Iranian cluster by CrowdStrike's threat intelligence team.