Ferocious Kitten
G01371 reportsaliases · Ferocious Kitten
1
Reports
3
Techniques
3
Tactics
3
Countries
67%
Hunt coverage
1
Aliases
Analyst assessment — key judgments
- Signature techniques: T1036 (Masquerading), T1593.001 (Social Media), AML.T0074 (Masquerading).
- Primary targeting: IR, US, IL.
- Newly emerged: 1 report(s) in last 30d vs 0 prior (+100%).
- Recent movement: 3 new technique(s) in the last 30 days.
- Hunt coverage 67% of 3 observed techniques (1 gap(s)).
- Assessment confidence: medium (60).
Activity & trend
Newly emergedLast 30d: 1 vs 0 prior (+100%)· first reported 2026-07-01 · last 2026-07-01
0
7d
1
30d
1
90d
1
All
0.1
Rpts/wk
Reporting timeline · 12 months
Movement — last 30 days
New techniques
T1036T1593.001AML.T0074Targeting gained
ILIRUSOverview
Analyst triage
Intelligence summary
Ferocious Kitten is a threat group that has primarily targeted Persian-speaking individuals in Iran since at least 2015.(Citation: Kaspersky Ferocious Kitten Jun 2021)
Top co-occurring indicators
Aliases & naming
Targeting · countries
Targeting · named victims
ATT&CK technique matrix
Coverage vs hunt library:
—
Hunt-coverage gaps — prioritized
Top techniques by observation
- T1036 · Masqueradingconf 601
- T1593.001 · Social Mediaconf 601
- AML.T0074 · Masqueradingconf 601
Threat catalogue · engineering roadmap
Flagged detection-engineering queue
Uncovered techniques you flagged for hunt / detection build-out, aggregated across every actor you visit. Stored locally in your browser.
Infrastructure
IOC type mix
Tooling / malware families
Relationships
Activity
30-day mention timeline
Recent reporting
| Title | Source | Severity | Collected |
|---|