All actors

Bouncing Golf

Also reported as Domestic Kitten and APT-C-50. Linked to Iran by three sources.

Reports
29
Last reported
Known CVEs
3
Techniques in ATT&CK
1
Origin
Iran
ID
domestic-kitten
Merge evidence
7 alias matches

Reports per quarter

  1. 2018 Q3: 4 reports
  2. 2018 Q4: no reports
  3. 2019 Q1: no reports
  4. 2019 Q2: 3 reports
  5. 2019 Q3: no reports
  6. 2019 Q4: 4 reports
  7. 2020 Q1: no reports
  8. 2020 Q2: no reports
  9. 2020 Q3: no reports
  10. 2020 Q4: no reports
  11. 2021 Q1: 3 reports
  12. 2021 Q2: 7 reports
  13. 2021 Q3: no reports
  14. 2021 Q4: no reports
  15. 2022 Q1: no reports
  16. 2022 Q2: no reports
  17. 2022 Q3: no reports
  18. 2022 Q4: 2 reports
  19. 2023 Q1: no reports
  20. 2023 Q2: 1 report
  21. 2023 Q3: no reports
  22. 2023 Q4: 1 report
  23. 2024 Q1: no reports
  24. 2024 Q2: no reports
  25. 2024 Q3: no reports
  26. 2024 Q4: no reports
  27. 2025 Q1: no reports
  28. 2025 Q2: no reports
  29. 2025 Q3: no reports
  30. 2025 Q4: no reports
  31. 2026 Q1: no reports
  32. 2026 Q2: 4 reports
Dated reports, 2018 Q3 to 2026 Q2.

Techniques seen in the last two years

  • T1418 1 report reports only
  • T1426 1 report reports only
  • T1437 1 report reports only
  • T1533 1 report reports only

Counts come from technique IDs in the actor's report text. “Reports only” means reports name the technique but MITRE ATT&CK® does not list it for this actor.

Also listed by ATT&CK

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Ferocious Kitten_ 6 years of covert surveillance in Iran _ Securelist

    date in the CCS '25 data Kaspersky fromORKLCCS '25 data

Show all 29 reports Show fewer
  1. Ferocious Kitten- 6 years of covert surveillance in Iran

    date in the title fromORKL

  2. APT_trends_report_Q1_2021_Securelist

    file creation date fromORKL

  3. APT trends report Q1 2021

    date in the title fromORKL

  4. mobile-malware-report.pdf

    file creation date fromORKL

  5. Domestic Kitten- an Iranian surveillance program

    date in the title fromORKL

  6. Mobile Campaign ‘Bouncing Golf’ Affects Middle East

    date in the title fromORKL

  7. Domestic Kitten: An Iranian Surveillance Operation

    file creation date fromORKL

  8. Domestic Kitten: An Iranian Surveillance Operation

    date in the CCS '25 data Checkpoint fromORKLCCS '25 data

  9. Domestic Kitten APT Operates in Silence Since 2016

    date in the title fromORKL

Newest first. Details opens the report in Explore.