Ajax Security Team

Ajax Security Team is the hacktivist identity and origin name of the Iranian threat cluster known as Flying Kitten. Beginning around 2010, the group operated as a defacement-focused collective on Iranian hacker forums before transitioning to targeted espionage campaigns against US defense contractors and Iranian dissidents. FireEye tracked the group's evolution from opportunistic website defacements to sophisticated spear phishing and malware distribution operations. Ajax Security Team members were identified through their activity on Ashiyane and similar Iranian hacking forums, providing a documented link between Iran's hacktivist community and state-directed cyber operations.