All actors

Predatory Sparrow

Also reported as Indra and Gonjeshke Darande.

Reports
18
Last reported
Known CVEs
7
ID
predatory-sparrow
Merge evidence
4 alias matches

Reports per quarter

  1. 2021 Q3: 3 reports
  2. 2021 Q4: no reports
  3. 2022 Q1: 2 reports
  4. 2022 Q2: no reports
  5. 2022 Q3: 4 reports
  6. 2022 Q4: no reports
  7. 2023 Q1: 1 report
  8. 2023 Q2: no reports
  9. 2023 Q3: 1 report
  10. 2023 Q4: no reports
  11. 2024 Q1: 3 reports
  12. 2024 Q2: no reports
  13. 2024 Q3: no reports
  14. 2024 Q4: 1 report
  15. 2025 Q1: no reports
  16. 2025 Q2: no reports
  17. 2025 Q3: no reports
  18. 2025 Q4: 1 report
  19. 2026 Q1: no reports
  20. 2026 Q2: 2 reports
Dated reports, 2021 Q3 to 2026 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

Show all 18 reports Show fewer
  1. EvilPlayout- Attack Against Iran’s State Broadcaster

    date in the title fromORKL

  2. Indra — Hackers Behind Recent Attacks on Iran

    date in the title fromORKL

  3. Indra — Hackers Behind Recent Attacks on Iran - Check Point Research

    date in the CCS '25 data Check Point fromORKLCCS '25 data

Newest first. Details opens the report in Explore.