Also known as: Cobalt Gypsy, Alibaba, Operation Cleaver, G0003, Op Cleaver, TG-2889, Tarh Andishan
A group of cyber actors utilizing infrastructure located in Iran have been conducting computer network exploitation activity against public and private U.S. organizations, including Cleared Defense Contractors (CDCs), academic institutions, and energy sector companies. This threat actor targets entities in the government, energy, and technology sectors that are located in or do business with Saudi Arabia.
No exploited CVEs have been attributed to this threat actor yet.
Browse CVE Database