Magic Hound
G00591 reportsAnalyst assessment — key judgments
- Signature techniques: T1588.007 (Artificial Intelligence), T1588.006 (Vulnerabilities), T1684 (Social Engineering).
- Primary targeting: IR, RU, UA, IL.
- Currently dormant: 0 report(s) in last 30d vs 0 prior (+0%).
- Hunt coverage 83% of 6 observed techniques (1 gap(s)).
- Assessment confidence: medium (60).
Activity & trend
Overview
Magic Hound is an Iranian-sponsored threat group that conducts long term, resource-intensive cyber espionage operations, likely on behalf of the Islamic Revolutionary Guard Corps. They have targeted European, U.S., and Middle Eastern government and military personnel, academics, journalists, and organizations such as the World Health Organization (WHO), via complex social engineering campaigns since at least 2014.(Citation: FireEye APT35 2018)(Citation: ClearSky Kittens Back 3 August 2020)(Citation: Certfa Charming Kitten January 2021)(Citation: Secureworks COBALT ILLUSION Threat Profile)(Citation: Proofpoint TA453 July2021)
ATT&CK technique matrix
- T1588.007 · Artificial Intelligenceconf 601
- T1588.006 · Vulnerabilitiesconf 601
- T1684 · Social Engineeringconf 601
- T1593.001 · Social Mediaconf 601
- T1589.001 · Credentialsconf 601
- AML.T0016.002 · Generative AIconf 601
Threat catalogue · engineering roadmap
Uncovered techniques you flagged for hunt / detection build-out, aggregated across every actor you visit. Stored locally in your browser.
Infrastructure
Relationships
Activity
| Title | Source | Severity | Collected |
|---|