Ferocious Kitten
Ferocious Kitten is an Iranian-aligned advanced persistent threat (APT) group first identified in 2015. This group primarily engages in cyber espionage operations, with a focus on Middle Eastern targets but has been observed reaching into global networks. Known for using malicious Telegram applications as a lure, Ferocious Kitten is affiliated with broader Iranian state-backed activity clusters. Their primary methods include surveillance malware, phishing, and social engineering campaigns.
Ferocious Kitten
Country of Origin
Members
Leadership
Ferocious Kitten TTPs
Tactics
Primarily engages in cyber espionage campaigns to gather intelligence on dissidents, regional rivals, and geopolitical targets.
Techniques
Weaponized Telegram applications embedding malware.
Credential theft and spyware installation.
Social engineering through fake messaging apps.
Procedures
Deployment of custom malware such as MarkiRAT.
Malicious updates through compromised apps.
Covert surveillance of targets' communications.
Want to Shut Down Threats Before They Start?
Indicators of Compromise (IoCs)
Malware families: MarkiRAT, Pupyrat variants
Infrastructure: Malicious Telegram channels and delivery domains (sources vary; see vendor-specific threat reports below).
Key Victims
Predominantly Middle Eastern dissidents and political activists. Some spillover to international targets through malware propagation.
Notable Cyberattacks
2015-2021
2021
Law Enforcement & Arrests
No arrests or takedowns have been publicly attributed to Ferocious Kitten activity.
How to Defend Against Ferrocious Kitten
Enforcing mobile device management (MDM) to block unauthorized apps.
Continuous endpoint monitoring to detect spyware and RAT behavior.
User education on avoiding unofficial app sources and phishing.
Leveraging Huntress’s managed endpoint detection and response (EDR) to proactively identify malicious behaviors like RAT installation and exfiltration.
Huntress solutions help protect organizations by monitoring endpoints, detecting intrusions, and mitigating Ferocious Kitten threats withenterprise-grade technology.
