APT33 is a threat actor attributed to IR, also known as G0064, COBALT TRINITY, Elfin. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does APT33 exploit?

APT33 is known to exploit 3 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

APT33

Also known as: G0064, COBALT TRINITY, Elfin, MAGNALLIUM, ATK35, APT 33, Peach Sandstorm, Refined Kitten, TA451, HOLMIUM, BLEAK ION

IRCyber Espionage

Exploited CVEs

Overview

Our analysis reveals that APT33 is a capable group that has carried out cyber espionage operations since at least 2013. We assess APT33 works at the behest of the Iranian government.

Exploited Vulnerabilities

CVE ID	Action
CVE-2017-11774	View Details