Actors Insights|Latest update24/07/2026

APT35

Named by MandiantSuspected state sponsor: Islamic Republic of Iran

APT35 is Mandiant's designation for the Iranian state-sponsored threat actor widely tracked as Charming Kitten, linked to the Islamic Revolutionary Guard Corps (IRGC). Active since at least 2014, the group targets journalists, academics, human rights activists, think tank researchers, and government officials using elaborate spear phishing campaigns. APT35 is known for impersonating major media outlets and sending credential harvesting links via email and SMS. The group also exploits N-day vulnerabilities in enterprise applications such as ProxyShell and Log4Shell to gain initial access to high-value targets.

First Seen:Jan 2014
Last Seen:Nov 2025
Indexed Reports:7
Public IOCs:74
Cluster: Charming KittenMitre: Magic HoundMisp: APT35
also known as:
Newscaster Team (Symantec)Magic Hound (Palo Alto)G0059 (Mitre)PHOSPHORUS (Microsoft)Mint Sandstorm (Microsoft)TunnelVision (SentinelOne)COBALT MIRAGE (SecureWorks)Agent SerpensAPT35 (Mandiant)TA453 (Proofpoint)COBALT ILLUSION (SecureWorks)Charming Kitten (CrowdStrike)ITG18 (IBM)

Targeted Regions

Afghanistan
AF
Afghanistan
Afghanistan
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Europe
EU
Europe
Europe
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2021 ~ Oct 2021
Jan 2014 ~ Mar 2025
Jan 2021 ~ Oct 2021
Jan 2014 ~ Mar 2025
Dec 2021 ~ Aug 2023
Jan 2021 ~ Oct 2021
Jan 2014 ~ Mar 2025
Dec 2021 ~ Aug 2023
Jan 2014 ~ Mar 2025
Dec 2021 ~ Aug 2023
Jan 2014 ~ Mar 2025
Dec 2021 ~ Aug 2023
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Iran
IR
Iran
Iran
Jan 2021 ~ Oct 2021
Jan 2021 ~ Oct 2021
Jan 2021 ~ Oct 2021
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Israel
IL
Israel
Israel
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Nov 2021 ~ Jan 2022
Apr 2022 ~ Nov 2025
Jan 2014 ~ Mar 2025
Apr 2022 ~ Nov 2025
Jan 2014 ~ Mar 2025
Apr 2022 ~ Nov 2025
Jan 2014 ~ Mar 2025
Apr 2022 ~ Nov 2025
Jan 2014 ~ Mar 2025
Jan 2024 ~ Nov 2024
Apr 2022 ~ Nov 2025
Jan 2014 ~ Mar 2025
Jan 2024 ~ Nov 2024
Apr 2022 ~ Nov 2025
Jan 2014 ~ Mar 2025
Jan 2024 ~ Nov 2024
Apr 2022 ~ Nov 2025
Jordan
JO
Jordan
Jordan
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Kuwait
KW
Kuwait
Kuwait
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Lebanon
LB
Lebanon
Lebanon
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Middle East
ME
Middle East
Middle East
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2021 ~ Oct 2021
Jan 2014 ~ Mar 2025
Jan 2021 ~ Oct 2021
Jan 2014 ~ Mar 2025
Dec 2021 ~ Aug 2023
Jan 2021 ~ Oct 2021
Jan 2014 ~ Mar 2025
Dec 2021 ~ Aug 2023
Jan 2014 ~ Mar 2025
Dec 2021 ~ Aug 2023
Jan 2014 ~ Mar 2025
Dec 2021 ~ Aug 2023
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Qatar
QA
Qatar
Qatar
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
South Korea
KR
South Korea
South Korea
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Thailand
TH
Thailand
Thailand
Jan 2024 ~ Nov 2024
Jan 2024 ~ Nov 2024
Jan 2024 ~ Nov 2024
Turkey
TR
Turkey
Turkey
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
United Arab Emirates
AE
United Arab Emirates
United Arab Emirates
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Apr 2022 ~ Nov 2025
Jan 2024 ~ Nov 2024
Apr 2022 ~ Nov 2025
Jan 2024 ~ Nov 2024
Apr 2022 ~ Nov 2025
Jan 2024 ~ Nov 2024
Apr 2022 ~ Nov 2025
United Kingdom
GB
United Kingdom
United Kingdom
Jan 2021 ~ Oct 2021
Jan 2021 ~ Oct 2021
Jan 2021 ~ Oct 2021
United States
US
United States
United States
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2014 ~ Mar 2025
Jan 2024 ~ Nov 2024
Jan 2014 ~ Mar 2025
Jan 2024 ~ Nov 2024
Jan 2014 ~ Mar 2025
Jan 2024 ~ Nov 2024
Jan 2014Jun 2026

Targeted Sectors

Government Agencies and ServicesTelecommunicationDefenseUniversityFood and AgricultureManufacturingEnergyHealthcareDissidentJournalistsEducationMediaHigh-TechAerospaceUtilitiesPro-DemocracyPolitical

Recent Indexed Reports

  1. Public
    Inside APT35: Leaked Files Reveal Structured IRGC Cyber-Espionage Machine
  2. Public
    APT35: Iran’s Cyber Espionage Unit Targeting U.S. and Dissidents
  3. Public
    APT35 Targets Aerospace and Semiconductor Sectors Across Multiple Countries
see more

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.