Rocket Kitten: A campaign with 9 lives
released on 2015-11-09 @ 05:35:26 PM
Since early 2014, an attacker group of Iranian origin has been actively targeting persons
of interest by means of malware infection, supported by persistent spear phishing
campaigns. This cyber-espionage group was dubbed ‘Rocket Kitten,’ and remains active
as of this writing, with reported attacks as recent as October 2015.
The Rocket Kitten group and its attacks have been analyzed on numerous occasions by
several vendors and security professionals, resulting in various reports describing the
group’s method of operation, tools and techniques.
Characterized by relatively unsophisticated technical merit and extensive use of spear
phishing, the group targeted individuals and organizations in the Middle East (including
targets inside Iran itself), as well as across Europe and in the United States.