Actors Insights|Latest update27/01/2025
APT39
Named by MandiantSuspected state sponsor: Islamic Republic of IranFirst Seen:Dec 2014
Last Seen:Dec 2020
Indexed Reports:4
Public IOCs:60
also known as:
COBALT HICKMAN (SecureWorks)Chafer (Symantec)G0087 (Mitre)ITG07 (IBM)Radio Serpens (Palo Alto)Remix Kitten (CrowdStrike)Silent Librarian (PhishLabs)TA454 (Proofpoint)
Targeted Regions

EgyptEgypt
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019

EuropeEurope
Sep 2020 ~ Sep 2020

IranIran
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020
Dec 2014 ~ Dec 2020 Sep 2020 ~ Sep 2020

IraqIraq
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019

IsraelIsrael
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019

KuwaitKuwait
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019

Middle EastMiddle East
Sep 2020 ~ Sep 2020

QatarQatar
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019

Saudi ArabiaSaudi Arabia
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019

SpainSpain
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019

TurkeyTurkey
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019

United Arab EmiratesUnited Arab Emirates
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019

United StatesUnited States
Dec 2018 ~ Jan 2019
Dec 2018 ~ Jan 2019
Sep 2020 ~ Sep 2020
Jan 2014Jul 2025
Targeted Sectors
JournalistsHuman RightsPro-DemocracyDissidentGovernment Agencies and ServicesTourismTelecommunicationUniversityPoliticalCommunicationTechnologyTransport
Recent Indexed Reports
Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.