Spectral Kitten

SPECTRAL KITTEN is an Iranian state-nexus adversary active since at least 2019. Previously tracked as the ProfaneTalon activity cluster, the adversary’s activity is characterized by the deployment of its custom IPSecHelper implant and Apostle ransomware variant in disruptive operations. In late January 2024, a UK-based Iranian-opposition news outlet revealed the identities of operators allegedly b...