Threat actor · all actors
CopyKittensG0052 state
🇮🇷 IR
aka CopyKittens, Slayer Kitten, G0052
Last updated: 2026-07-03
0attributed CVEs
14ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[CopyKittens](https://attack.mitre.org/groups/G0052) is an Iranian cyber espionage group that has been operating since at least 2013. It has targeted countries including Israel, Saudi Arabia, Turkey, the U.S., Jordan, and Germany. The group is responsible for the campaign known as Operation Wilted Tulip.(Citation: ClearSky CopyKittens March 2017)(Citation: ClearSky Wilted Tulip July 2017)(Citation: CopyKittens Nov 2015)
Source: MITRE ATT&CK
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
SI-4 | 8 / 14 | 57% |
CM-2 | 7 / 14 | 50% |
SI-10 | 7 / 14 | 50% |
SI-3 | 6 / 14 | 43% |
SI-7 | 6 / 14 | 43% |
AC-3 | 5 / 14 | 36% |
CM-6 | 5 / 14 | 36% |
CM-7 | 5 / 14 | 36% |
RA-5 | 5 / 14 | 36% |
AC-2 | 4 / 14 | 29% |
AC-6 | 4 / 14 | 29% |
CA-7 | 4 / 14 | 29% |
CM-5 | 4 / 14 | 29% |
CM-8 | 4 / 14 | 29% |
SC-7 | 4 / 14 | 29% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- DarkHydrus 0.30
- Thrip 0.22
- APT19 0.21
- Gorgon Group 0.19
- Deep Panda 0.19
Same nation-state
- HomeLand Justice 1.00
- Outer Space 1.00
- Juicy Mix 1.00
- Cleaver 1.00
- OilRig 1.00
Same category
- Night Dragon 1.00
- FunnyDream 1.00
- C0011 1.00
- Operation Wocao 1.00
- Operation Dream Job 1.00