Also known as: Domestic Kitten, Bouncing Golf, APT-C-50
An extensive surveillance operation targets specific groups of individuals with malicious mobile apps that collect sensitive information on the device along with surrounding voice recordings. Researchers with CheckPoint discovered the attack and named it Domestic Kitten. The targets are Kurdish and Turkish natives, and ISIS supporters, all Iranian citizens.
Executive Summary
Domestic Kitten is a nation-state threat actor primarily involved in espionage activities targeting specific groups, including Kurds, Turks, ISIS supporters, and Iranians through malicious mobile applications.
Goals & Targeting
Domestic Kitten's strategic objective is to gather intelligence through targeted surveillance. They specifically target individuals linked to Kurdish and Turkish groups, ISIS supporters, and Iranian citizens, suggesting a focus on regional security concerns and potential adversarial relationships.
Enhanced Description
Domestic Kitten, also known as Bouncing Golf and APT-C-50, conducts surveillance against targeted individuals using malicious mobile apps. These apps collect sensitive information and voice recordings, indicating a high level of sophistication in their espionage tactics. The group's activities were first identified by CheckPoint researchers, highlighting its focus on geopolitical regions with significant security interests.
Key Capabilities
MITRE ATT&CK Tactics
ATT&CK Techniques
Software / Tooling
Campaigns & Victims
Domestic Kitten's campaigns involve targeted phishing and social engineering tactics to distribute malicious apps. Their activities have been observed in regions with significant geopolitical tensions, indicating a pattern of surveillance aimed at specific national security interests.
IOC Patterns
Recommended Actions
Suggested Tags
Confidence Assessment
Moderately confident; while specific TTPs are identified, more details on their tools and techniques would enhance understanding. Limited historical data beyond CheckPoint's discovery is a gap.
No techniques linked yet.
No tools linked yet.
No campaigns linked yet.
No observed data linked yet.
No IOCs linked yet.
No references recorded yet.
0
Techniques
0
Tools
0
Campaigns
0
IOCs
0
Observed Data
0
Tactics