Actors Insights|Latest update08/01/2025

Mint Sandstorm

Named by MicrosoftSuspected state sponsor: Islamic Republic of Iran
This threat actor previously was known as Phosphorus
First Seen:Dec 2017
Last Seen:Jan 2024
Indexed Reports:8
Public IOCs:135
Cluster: Charming KittenMitre: Magic HoundMisp: APT35
also known as:
APT35 (Mandiant)APT42 (Mandiant)COBALT ILLUSION (SecureWorks)Charming Kitten (CrowdStrike)COBALT MIRAGE (SecureWorks)G0059 (Mitre)ITG18 (IBM)Magic Hound (Palo Alto)Newscaster Team (Symantec)PHOSPHORUS (Microsoft)TA453 (Proofpoint)TunnelVision (SentinelOne)

Targeted Regions

Belgium
BE
Belgium
Belgium
Nov 2023 ~ Jan 2024
Canada
CA
Canada
Canada
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Egypt
EG
Egypt
Egypt
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Europe
EU
Europe
Europe
Sep 2020 ~ Oct 2020
Sep 2020 ~ Oct 2020
Sep 2021 ~ Apr 2023
Sep 2021 ~ Apr 2023
Sep 2021 ~ Apr 2023
Sep 2021 ~ Apr 2023
Sep 2021 ~ Apr 2023
France
FR
France
France
Nov 2023 ~ Jan 2024
Israel
IL
Israel
Israel
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Sep 2021 ~ Apr 2023
Dec 2017 ~ Jan 2022
Sep 2021 ~ Apr 2023
Sep 2021 ~ Apr 2023
Sep 2021 ~ Apr 2023
Sep 2021 ~ Apr 2023
Nov 2023 ~ Jan 2024
Jordan
JO
Jordan
Jordan
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Middle East
ME
Middle East
Middle East
Sep 2020 ~ Oct 2020
Sep 2020 ~ Oct 2020
Morocco
MA
Morocco
Morocco
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Palestine
PS
Palestine
Palestine
Nov 2023 ~ Jan 2024
Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
Sep 2020 ~ Oct 2020
Sep 2020 ~ Oct 2020
Spain
ES
Spain
Spain
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Turkey
TR
Turkey
Turkey
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
United Kingdom
GB
United Kingdom
United Kingdom
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Nov 2023 ~ Jan 2024
United States
US
United States
United States
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Sep 2020 ~ Oct 2020
Dec 2017 ~ Jan 2022
Sep 2020 ~ Oct 2020
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Sep 2021 ~ Apr 2023
Dec 2017 ~ Jan 2022
Sep 2021 ~ Apr 2023
May 2022 ~ Jun 2022
Sep 2021 ~ Apr 2023
Sep 2021 ~ Apr 2023
Sep 2021 ~ Apr 2023
Nov 2023 ~ Jan 2024
Venezuela
VE
Venezuela
Venezuela
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Yemen
YE
Yemen
Yemen
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Dec 2017 ~ Jan 2022
Jan 2017Aug 2025

Targeted Sectors

JournalistsEnergyOil and GasPro-DemocracyPoliticalDefenseFinancialGovernment Agencies and ServicesInformation TechnologyHealthcareTelecommunicationResearchersUniversityConstructionHuman RightsLogisticsUtilities

Recent Indexed Reports

  1. Public
    Mint Sandstorm Subgroup Targets US Critical Infrastructure
  2. Public
    Stealth in the System: PHOSPHORUS Exploits Exchange Server in Infrastructure Sector Attack
  3. Public
    PowerLess Backdoor: Analyzing the Phosphorus Group's Cyber Espionage Tool
see more

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.