Actors Insights|Latest update03/12/2024

Magic Hound

Named by Palo AltoSuspected state sponsor: Islamic Republic of Iran

Magic Hound is an Iranian-sponsored threat group that conducts long term, resource-intensive cyber espionage operations, likely on behalf of the Islamic Revolutionary Guard Corps. They have targeted European, U.S., and Middle Eastern government and military personnel, academics, journalists, and organizations such as the World Health Organization (WHO), via complex social engineering campaigns since at least 2014.

First Seen:May 2016
Last Seen:Feb 2017
Indexed Reports:1
Public IOCs:80
Cluster: Charming KittenMitre: Magic HoundMisp: APT35
also known as:
APT35 (Mandiant)COBALT ILLUSION (SecureWorks)COBALT MIRAGE (SecureWorks)Charming Kitten (CrowdStrike)G0059 (Mitre)ITG18 (IBM)Mint Sandstorm (Microsoft)Newscaster Team (Symantec)PHOSPHORUS (Microsoft)TA453 (Proofpoint)TunnelVision (SentinelOne)

Targeted Regions

Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
May 2016 ~ Feb 2017
May 2016 ~ Feb 2017
May 2016 ~ Feb 2017
May 2016 ~ Feb 2017
Jan 2016Aug 2024

Targeted Sectors

Government Agencies and ServicesInformation TechnologyEnergy

Recent Indexed Reports

  1. Public
    Magic Hound Strikes Saudi Arabia with Spearphishing and PowerShell Attacks

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.