Fox Kitten

Fox Kitten is threat actor with a suspected nexus to the Iranian government that has been active since at least 2017 against entities in the Middle East, North Africa, Europe, Australia, and North America. Fox Kitten has targeted multiple industrial verticals including oil and gas, technology, government, defense, healthcare, manufacturing, and engineering.

View MITRE record ↗

• CISA. (2020, September 15). Iran-Based Threat Actor Exploits VPN Vulnerabilities. Retrieved December 21, 2020.
• ClearSky. (2020, December 17). Pay2Key Ransomware – A New Campaign by Fox Kitten. Retrieved December 21, 2020.
• ClearSky. (2020, February 16). Fox Kitten – Widespread Iranian Espionage-Offensive Campaign. Retrieved December 21, 2020.
• Dragos. (n.d.). PARISITE. Retrieved December 21, 2020.
• Microsoft . (2023, July 12). How Microsoft names threat actors. Retrieved November 17, 2023.
• Orleans, A. (2020, August 31). Who Is PIONEER KITTEN?. Retrieved December 21, 2020.