Actors Insights|Latest update13/11/2025

TG-2889

Named by SecureWorksSuspected state sponsor: Islamic Republic of Iran
First Seen:Dec 2014
Last Seen:Oct 2015
Indexed Reports:1
Public IOCs:0
Cluster: MiscellaneousMitre: CleaverMisp: Cleaver
also known as:
Operation CleaverOp CleaverTarh Andishan (Cylance)AlibabaTG-2889 (SecureWorks)COBALT GYPSY (SecureWorks)G0003 (Mitre)Threat Group 2889

Targeted Regions

Algeria
DZ
Algeria
Algeria
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Bahrain
BH
Bahrain
Bahrain
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Canada
CA
Canada
Canada
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Egypt
EG
Egypt
Egypt
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
India
IN
India
India
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Iran
IR
Iran
Iran
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Israel
IL
Israel
Israel
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Jordan
JO
Jordan
Jordan
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Kuwait
KW
Kuwait
Kuwait
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Qatar
QA
Qatar
Qatar
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Sudan
SD
Sudan
Sudan
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
United Arab Emirates
AE
United Arab Emirates
United Arab Emirates
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
United Kingdom
GB
United Kingdom
United Kingdom
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
United States
US
United States
United States
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Dec 2014 ~ Oct 2015
Jan 2014Jul 2025

Targeted Sectors

DefenseManufacturingAerospace

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.