Actors Insights|Latest update04/07/2026

ITG17

Named by IBMSuspected state sponsor: Islamic Republic of Iran

ITG17 is IBM X-Force's designation for the Iranian threat cluster known as Imperial Kitten. IBM documented this group conducting espionage operations against organizations in the Middle East, particularly targeting sectors aligned with IRGC intelligence priorities including defense, maritime, and technology. ITG17 activity overlaps with CrowdStrike's Imperial Kitten, Symantec's Tortoiseshell, and Proofpoint's TA456 tracking, reflecting the same underlying Iranian state actor operating under different researcher designations.

First Seen:Oct 2019

Last Seen:Sep 2022

Indexed Reports:1

Public IOCs:3

Cluster: Imperial Kitten

also known as:

ITG17 (IBM)

Targeted Sectors

Government Agencies and ServicesAerospaceMediaReligiousTransportation

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.