Parisite

Parisite is CrowdStrike's designation for the Iranian IRGC-linked threat cluster known as Pioneer Kitten. CrowdStrike documented Parisite conducting large-scale VPN vulnerability exploitation campaigns targeting government and critical infrastructure organizations, consistent with the broader Pioneer Kitten cluster's tradecraft. The group rapidly weaponizes newly disclosed CVEs in enterprise VPN products to gain initial access to target networks, then maintains persistence for both intelligence collection and access brokering to ransomware affiliates.