Cotton Sandstorm is an Iranian state-sponsored threat actor primarily engaged in cyber espionage and influence operations, strongly linked to the Islamic Revolutionary Guard Corps. The group has been active since at least 2020, initially focusing on hack-and-leak operations predominantly against Israeli organizations, but has since expanded its scope to a broader international audience and diversified its tactics. A distinctive characteristic of Cotton Sandstorm is its strategic use of generative artificial intelligence tools for influence operations, including the creation of deepfakes and the manipulation of images and voices for propaganda. The group also maintains a network of fictitious hosting resellers, such as VPS-Agent and Server-Speed, to obfuscate its operational infrastructure. Cotton Sandstorm is known to operate under numerous aliases, including Emennet Pasargad, Haywire Kitten, Marnanbridge, Neptunium, Holy Souls, and Aria Sepehr Ayandehsazan (ASA), which it adopted as a

Aliases del actor

Emennet PasargadHAYWIRE KITTENHoly SoulsMARNANBRIDGENEPTUNIUMo Vice Leakerlo que sugiere una red operativa diversapotencialmente multifacética

Actores similares

Fox Kittenapt · 1Charming Kittenactor · 1cutting-kittenactor · 1clever-kittenactor · 1charming-kittenactor · 1rocket-kittenactor · 1flash-kittenactor · 1domestic-kittenactor · 1fox-kittenactor · 1tracer-kittenactor · 1