Ferocious Kitten
Ferocious Kitten is a threat group that has primarily targeted Persian-speaking individuals in Iran since at least 2015.
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--6566aac9-dad8-4332-ae73-20c23bad7f02
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-02T12:53:29+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (6)
Adversaries may acquire domains that can be used during targeting. Domain names are the human readable names used to represent one or more IP addresse
An adversary may rely upon a user opening a malicious file in order to gain execution. Users may be subjected to social engineering to get them to ope
Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them. This is don
Adversaries may abuse the right-to-left override (RTLO or RLO) character (U+202E) to disguise a string and/or file name to make it appear benign. RTLO
Adversaries may send spearphishing emails with a malicious attachment in an attempt to gain access to victim systems. Spearphishing attachment is a sp
Adversaries may buy, steal, or download software tools that can be used during targeting. Tools can be open or closed source, free or commercial. A to
Software & Tools (2)
BITSAdmin is a command line tool used to create and manage [BITS Jobs](https://attack.mitre.org/techniques/
MarkiRAT is a remote access Trojan (RAT) compiled with Visual Studio that has been used by [Ferocious Kitte
Explore this actor's full graph with Ninja Signal