Actors Insights|Latest update20/02/2025

APT39

Named by MandiantSuspected state sponsor: Islamic Republic of Iran
First Seen:Dec 2014
Last Seen:Dec 2020
Indexed Reports:4
Public IOCs:60
Cluster: Rana Intelligence ComputingMitre: APT39Misp: APT39
also known as:
COBALT HICKMAN (SecureWorks)Chafer (Symantec)G0087 (Mitre)ITG07 (IBM)Radio Serpens (Palo Alto)Remix Kitten (CrowdStrike)Silent Librarian (PhishLabs)TA454 (Proofpoint)

Targeted Regions

Egypt
EG
Egypt
Egypt
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
Europe
EU
Europe
Europe
Sep 2020 ~ Sep 2020
Iran
IR
Iran
Iran
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Sep 2020 ~ Sep 2020
Iraq
IQ
Iraq
Iraq
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
Israel
IL
Israel
Israel
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
Kuwait
KW
Kuwait
Kuwait
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
Middle East
ME
Middle East
Middle East
Sep 2020 ~ Sep 2020
Qatar
QA
Qatar
Qatar
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
Spain
ES
Spain
Spain
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
Turkey
TR
Turkey
Turkey
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
United Arab Emirates
AE
United Arab Emirates
United Arab Emirates
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
United States
US
United States
United States
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
Sep 2020 ~ Sep 2020
Jan 2014Jul 2025

Targeted Sectors

JournalistsHuman RightsPro-DemocracyDissidentGovernment Agencies and ServicesTourismTelecommunicationUniversityPoliticalCommunicationTechnologyTransport

Recent Indexed Reports

  1. Public
    Iranian APT39 Uses Android Malware for Domestic Surveillance
  2. Public
    Iranian APT39 Targets Global Sectors with Sophisticated Malware Campaign

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.