Fox Kitten is an Iranian state-sponsored cyber espionage group that emerged in 2017, known for its rapid exploitation of newly disclosed vulnerabilities in internet-facing perimeter devices. The group operates with a dual motivation: primarily intelligence gathering for the Iranian government and, increasingly, monetizing access to compromised networks by selling it to or directly collaborating with ransomware affiliates. This unique blend of state-sponsored espionage and cybercrime-for-profit distinguishes them from many other threat actors. Initially focused on espionage, Fox Kitten evolved to act as an 'access team,' establishing persistent footholds for broader Iranian cyber operations and for enabling ransomware attacks. The group is tracked by various names, including Pioneer Kitten, UNC757, Parisite, RUBIDIUM, and Lemon Sandstorm, and has referred to itself as 'Br0k3r' and 'xplfinder'. It is often associated with or overlaps activities tied to other Iranian APT groups such as AP

Aliases del actor

Lemon SandstormPARISITEPIONEER KITTENPioneerKittenRUBIDIUMUNC757

Actores similares

fox-kittenactor · 1PioneerKittenactor · 1Charming Kittenactor · 1cutting-kittenactor · 1clever-kittenactor · 1charming-kittenactor · 1rocket-kittenactor · 1flash-kittenactor · 1domestic-kittenactor · 1tracer-kittenactor · 1