Actors Insights|Latest update29/08/2024

Cobalt Gypsy

Named by SecureWorksSuspected state sponsor: Islamic Republic of Iran
First Seen:Apr 2016
Last Seen:Jul 2021
Indexed Reports:3
Public IOCs:54
Cluster: OilRigMitre: OilRigMisp: Cleaver
also known as:
APT34 (Mandiant)AlibabaEUROPIUM (Microsoft)Evasive SerpensG0003 (Mitre)G0049 (Mitre)Hazel Sandstorm (Microsoft)Helix Kitten (CrowdStrike)IRN2 (Area 1)OilRig (Palo Alto)Op CleaverOperation CleaverTG-2889 (SecureWorks)Tarh Andishan (Cylance)

Most Common Tactics

Targeted Regions

Bangladesh
BD
Bangladesh
Bangladesh
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
India
IN
India
India
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Iran
IR
Iran
Iran
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Iraq
IQ
Iraq
Iraq
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Israel
IL
Israel
Israel
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Jan 2017 ~ Feb 2017
Apr 2016 ~ Jul 2017
Jan 2017 ~ Feb 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
United States
US
United States
United States
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Apr 2016 ~ Jul 2017
Jan 2016Aug 2024

Targeted Sectors

Information TechnologyOil and GasFinancialConsultingAerospaceHealthcare

Recent Indexed Reports

  1. Public
    Mia Ash: Anatomy of a cyber espionage persona, COBALT GYPSY lures middle eastern targets
  2. Public
    COBALT GYPSY's Yet Another PupyRAT-driven Phishing Campaign

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.