Loading threat actor…
KittenBusters is an online persona or group known for leaking internal details, tooling information, infrastructure data, targeting information, and alleged operator identities associated with the Iranian cyber-espionage actor APT35, also widely tracked as Charming Kitten. Public reporting links KittenBusters to the publication of multiple archives detailing APT35 operations, including material related to the BellaCiao backdoor. The actor is notable primarily as a leaker focused on exposing another threat actor rather than for independently documented intrusion, ransomware, or extortion operations. Available high-confidence information supports characterization of KittenBusters as conducting disclosure and exposure activity centered on APT35/Charming Kitten; broader operational capabilities, victimology, and geographic attribution are not currently available at high confidence.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Online persona conducting exposure/doxing-style counter-ops by publishing alleged infrastructure, tooling, targets, and operational practices associated with CharmingKitten.
KittenBusters is a group responsible for leaking internal documents of APT35, exposing Iranian cyber operations.
KittenBusters is known for leaking files and information related to APT35's operations, specifically about the BellaCiao backdoor.
Leak/anti-APT activity cluster publishing dox/leak archives about APT35/Charming Kittens, including tooling and alleged member details.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.