All actors

Magic Kitten

Also reported as VOYEUR and Group 42. Linked to Iran by three sources.

Reports
9
Last reported
Known CVEs
3
Origin
Iran
ID
magic-kitten
Merge evidence
5 alias matches

Reports per quarter

  1. 2014 Q1: 3 reports
  2. 2014 Q2: no reports
  3. 2014 Q3: no reports
  4. 2014 Q4: no reports
  5. 2015 Q1: no reports
  6. 2015 Q2: no reports
  7. 2015 Q3: no reports
  8. 2015 Q4: no reports
  9. 2016 Q1: no reports
  10. 2016 Q2: 1 report
  11. 2016 Q3: no reports
  12. 2016 Q4: no reports
  13. 2017 Q1: no reports
  14. 2017 Q2: no reports
  15. 2017 Q3: no reports
  16. 2017 Q4: 1 report
  17. 2018 Q1: 1 report
  18. 2018 Q2: no reports
  19. 2018 Q3: no reports
  20. 2018 Q4: no reports
  21. 2019 Q1: 2 reports
  22. 2019 Q2: no reports
  23. 2019 Q3: no reports
  24. 2019 Q4: no reports
  25. 2020 Q1: no reports
  26. 2020 Q2: no reports
  27. 2020 Q3: no reports
  28. 2020 Q4: no reports
  29. 2021 Q1: no reports
  30. 2021 Q2: no reports
  31. 2021 Q3: no reports
  32. 2021 Q4: no reports
  33. 2022 Q1: no reports
  34. 2022 Q2: no reports
  35. 2022 Q3: no reports
  36. 2022 Q4: no reports
  37. 2023 Q1: no reports
  38. 2023 Q2: no reports
  39. 2023 Q3: no reports
  40. 2023 Q4: no reports
  41. 2024 Q1: no reports
  42. 2024 Q2: no reports
  43. 2024 Q3: no reports
  44. 2024 Q4: no reports
  45. 2025 Q1: no reports
  46. 2025 Q2: no reports
  47. 2025 Q3: no reports
  48. 2025 Q4: no reports
  49. 2026 Q1: no reports
  50. 2026 Q2: 1 report
Dated reports, 2014 Q1 to 2026 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Report2019GlobalThreatReport

    file creation date fromORKL

  2. CrowdStrike_GTR_2019.pdf

    file creation date fromORKL

  3. Iran’s Cyber Ecosystem- Who Are the Threat Actors-

    date in the title fromORKL

  4. Iran_Cyber_Final_Full_v2

    file creation date fromORKL

  5. PowerPoint Presentation

    date in the CCS '25 data CrowdStrike fromORKLCCS '25 data

  6. Iran and Russia blamed for state-sponsored espionage

    date in the title fromORKL

  7. Iran and Russia blamed for statesponsored espionage

    Malpedia library date fromORKL

  8. Iran and Russia blamed for state-sponsored espionage

    Malpedia library date fromORKL

Newest first. Details opens the report in Explore.