APT50

GPTKB entity

Statements (23)
Predicate Object
gptkbp:instanceOf cyber threat group
gptkbp:activeYearsStart 2014
gptkbp:alsoKnownAs gptkb:Rocket_Kitten
gptkbp:associatedWith gptkb:Iran
gptkbp:connectsTo gptkb:Iranian_government
gptkbp:countryOfOrigin gptkb:Iran
https://www.w3.org/2000/01/rdf-schema#label APT50
gptkbp:notableBattle attacks on Middle Eastern governments
attacks on defense contractors
attacks on academic institutions
gptkbp:target gptkb:energy
government organizations
defense sector
telecommunications sector
individuals in the Middle East
gptkbp:technique credential harvesting
custom malware
spear phishing
gptkbp:usesMalware gptkb:NetTraveler
gptkb:RocketMan
gptkb:GHOLE
gptkbp:bfsParent gptkb:Operation_Winnti
gptkbp:bfsLayer 7