jordiserrano.meClickFixKAIROSIntelTracker
Panel de inteligencia » APTTrail: APT RAMPANTKITTEN indicators and references

APTTrail: APT RAMPANTKITTEN indicators and references

Ioc 1 min lectura apt-rampantkitten
Fecha
18 Jun 2026
Actor
apt-rampantkitten
Tipo
Ioc
Pais
Iran
Sector
-
Confianza
high
100
Prioridad analitica
Alta

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

21IOCs
0TTPs
apt-rampantkittenActor
IranPais
Executive Summary
APTTrail mantiene indicadores publicos asociados a APT RAMPANTKITTEN. Aliases observados: APT RAMPANTKITTEN. Conteo por tipo: domain: 19.

Key Points

  • https://otx.alienvault.com/pulse/5f64d3ca157b5eecc4646710
  • https://research.checkpoint.com/2020/rampant-kitten-an-iranian-espionage-campaign/

Resumen APTTrail

APTTrail mantiene indicadores publicos asociados a APT RAMPANTKITTEN. Aliases observados: APT RAMPANTKITTEN. Conteo por tipo: domain: 19.

Indicadores de Compromiso (IOCs)

TipoValorContexto
Domainafalr-onedrive.comAPTTrail
Domainafalr-sharepoint.comAPTTrail
Domainalarabiye.netAPTTrail
Domaincpuconfig.comAPTTrail
Domaindeveloperchrome.comAPTTrail
Domainendupload.comAPTTrail
Domainfirefox-addons.comAPTTrail
Domaingradleservice.infoAPTTrail
Domainmailgoogle.infoAPTTrail
Domainpicfile.netAPTTrail
Domaintelegrambackups.comAPTTrail
Domaintelegrambots.meAPTTrail
Domaintelegramco.orgAPTTrail
Domaintelegramdesktop.comAPTTrail
Domaintelegramreport.meAPTTrail
Domaintelegramup.comAPTTrail
Domainupdate-help.comAPTTrail
Domainvareangold.deAPTTrail
Domainwinchecking.comAPTTrail

Referencias

Diamond Model

Adversary
apt-rampantkitten
Ver perfil →
Victim
APTTrail: APT RAMPANTKITTEN indicators and references
Iran
Capability
Ioc
Infrastructure
afalr-onedrive.com
afalr-sharepoint.com
alarabiye.net
cpuconfig.com

Relations

Mapa de nodos relacionados por IOCs compartidos, actor, enlaces IntelTracker/OSINT, campanas y victimas observadas. Haz click en un nodo para abrir el post, filtro o fuente.

12 enlaces
Domain
otx.alienvault.com
IOC compartido
Domain
research.checkpoint.com
IOC compartido
IntelTracker / OSINT link
otx.alienvault.com
apt-rampantkitten
enlace asociado al actor
IntelTracker / OSINT link
research.checkpoint.com
apt-rampantkitten
enlace asociado al actor
IntelTracker / OSINT link
github.com
apt-rampantkitten
enlace asociado al actor
IntelTracker / OSINT link
raw.githubusercontent.com
apt-rampantkitten
enlace asociado al actor
Nodo actual
APTTrail: APT RAMPANTKITTEN indicators and references
apt-rampantkitten · Iran
Victima
APTTrail: APT INDIGOZEBRA indicators and references
otx.alienvault.com research.checkpoint.com
IOC compartido
Victima
APTTrail: APT INDRA indicators and references
otx.alienvault.com research.checkpoint.com
IOC compartido
Victima
APTTrail: APT RANCOR indicators and references
otx.alienvault.com research.checkpoint.com
IOC compartido
Victima
APTTrail: APT TWISTEDPANDA indicators and references
otx.alienvault.com research.checkpoint.com
IOC compartido
Victima
APTTrail: apt-c-12 indicators and references
otx.alienvault.com
IOC compartido
Victima
APTTrail: APT 38 indicators and references
otx.alienvault.com
IOC compartido
Victima
APTTrail: APT ATLASCROSS indicators and references
otx.alienvault.com
IOC compartido
Victima
APTTrail: APT BABYSHARK indicators and references
otx.alienvault.com
IOC compartido

Indicadores de Compromiso (IOCs)

TipoValorContextoOSINT
Domain afalr-onedrive.com APTTrail VT OffSec SOCRadar
Domain afalr-sharepoint.com APTTrail VT OffSec SOCRadar
Domain alarabiye.net APTTrail VT OffSec SOCRadar
Domain cpuconfig.com APTTrail VT OffSec SOCRadar
Domain developerchrome.com APTTrail VT OffSec SOCRadar
Domain endupload.com APTTrail VT OffSec SOCRadar
Domain firefox-addons.com APTTrail VT OffSec SOCRadar
Domain gradleservice.info APTTrail VT OffSec SOCRadar
Domain mailgoogle.info APTTrail VT OffSec SOCRadar
Domain picfile.net APTTrail VT OffSec SOCRadar
Domain telegrambackups.com APTTrail VT OffSec SOCRadar
Domain telegrambots.me APTTrail VT OffSec SOCRadar
Domain telegramco.org APTTrail VT OffSec SOCRadar
Domain telegramdesktop.com APTTrail VT OffSec SOCRadar
Domain telegramreport.me APTTrail VT OffSec SOCRadar
Domain telegramup.com APTTrail VT OffSec SOCRadar
Domain update-help.com APTTrail VT OffSec SOCRadar
Domain vareangold.de APTTrail VT OffSec SOCRadar
Domain winchecking.com APTTrail VT OffSec SOCRadar
Domain otx.alienvault.com Extraido del contenido VT OffSec SOCRadar
Domain research.checkpoint.com Extraido del contenido VT OffSec SOCRadar

Referencias y enlaces

→ Perfil del actor apt-rampantkitten en el blog → Ver apt-rampantkitten en IntelTracker → URL IntelTracker: otx.alienvault.com→ URL IntelTracker: research.checkpoint.com → Fuente OSINT: github.com→ Fuente OSINT: raw.githubusercontent.com→ Fuente OSINT: otx.alienvault.com→ Fuente OSINT: research.checkpoint.com → Buscar apt-rampantkitten en APTTrail → Repositorio APTTrail → Mas incidentes en Iran → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog
← Volver al panel de inteligencia

Incidentes recientes

June 2026 Stealer Logs18 Jun 2026 · breach CFGI18 Jun 2026 · breach Berkadia18 Jun 2026 · breach Infinite Campus18 Jun 2026 · breach Horizon Family Medical Group18 Jun 2026 · incransom www.wolfconstruction.net18 Jun 2026 · lynx Amazon owned OneMedical.com18 Jun 2026 · shinyhunters NAIC.org18 Jun 2026 · shinyhunters