Flash Kitten is an Iranian state-sponsored cyber espionage group active since at least December 2016. Often referred to as Fox Kitten, and closely overlapping with activities attributed to APT34 (also known as OilRig or Helix Kitten), the group serves as a primary spear tip for Iranian cyber operations. Their primary motivation is intelligence gathering and establishing initial access within target networks, which can then be leveraged by other Iranian hacking groups for further operations, including potential disruptive or destructive attacks. What sets Flash Kitten apart is their consistent and rapid exploitation of newly disclosed vulnerabilities in internet-facing network infrastructure, often within days or even hours of public disclosure. This agility allows them to quickly establish footholds across a diverse set of global targets.