Actors Insights|Latest update28/05/2025

TunnelVision

Named by SentinelOneSuspected state sponsor: Islamic Republic of Iran
First Seen:Feb 2022
Last Seen:Mar 2022
Indexed Reports:2
Public IOCs:21
Cluster: Charming KittenMisp: APT35
also known as:
Newscaster Team (Symantec)Magic Hound (Palo Alto)G0059 (Mitre)PHOSPHORUS (Microsoft)Mint Sandstorm (Microsoft)TunnelVision (SentinelOne)COBALT MIRAGE (SecureWorks)APT35 (Mandiant)

Targeted Regions

Middle East
ME
Middle East
Middle East
Feb 2022 ~ Feb 2022
United States
US
United States
United States
Feb 2022 ~ Feb 2022
Jan 2022Nov 2025

Recent Indexed Reports

  1. Public
    TunnelVision Threat Actor Exploits Log4Shell Vulnerability in VMware Horizon Servers

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.