Actors Insights|Latest update29/05/2025
TG-2889
Named by SecureWorksSuspected state sponsor: Islamic Republic of IranFirst Seen:Dec 2014
Last Seen:Oct 2015
Indexed Reports:1
Public IOCs:0
also known as:
Operation CleaverOp CleaverTarh Andishan (Cylance)AlibabaTG-2889 (SecureWorks)COBALT GYPSY (SecureWorks)G0003 (Mitre)Threat Group 2889
Targeted Regions

AlgeriaAlgeria
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

BahrainBahrain
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

CanadaCanada
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

EgyptEgypt
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

IndiaIndia
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

IranIran
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

IsraelIsrael
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

JordanJordan
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

KuwaitKuwait
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

QatarQatar
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

Saudi ArabiaSaudi Arabia
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

SudanSudan
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

United Arab EmiratesUnited Arab Emirates
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

United KingdomUnited Kingdom
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015

United StatesUnited States
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Jan 2014Jul 2025
Targeted Sectors
DefenseManufacturingAerospace
Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.