Threat actor · G0059
Magic Hound
Also known as TA453, COBALT ILLUSION, Charming Kitten, ITG18, Phosphorus, Newscaster, APT35, Mint Sandstorm.
Magic Hound is an Iranian-sponsored threat group that conducts long term, resource-intensive cyber espionage operations, likely on behalf of the Islamic Revolutionary Guard Corps. They have targeted European, U.S., and Middle Eastern government and military personnel, academics, journalists, and organizations such as the World Health Organization (WHO), via complex social engineering campaigns since at least 2014.
ATT&CK techniques
78 mappedT1003.001T1005T1016T1016.001T1016.002T1018T1021.001T1027.010T1027.013T1033T1036.004T1036.005T1036.010T1046T1047T1049T1053.005T1056.001T1057T1059.001T1059.003T1059.005T1070.003T1070.004T1071T1071.001T1078.001T1078.002T1082T1083T1087.003T1090T1098.002T1098.007T1102.002T1105T1112T1113T1114T1114.001T1114.002T1136.001T1189T1190T1204.001T1204.002T1218.011T1482T1486T1505.003T1547.001T1560.001T1564.003T1566.002T1566.003T1567T1570T1571T1572T1573T1583.001T1583.006T1584.001T1585.001T1585.002T1586.002T1588.002T1589T1589.001T1589.002T1590.005T1591.001T1592.002T1595.002T1598.003T1685T1685.001T1686.003