Threat actor · all actors

APT33G0064 state

aka APT33, HOLMIUM, Elfin, Peach Sandstorm, APT 33, MAGNALLIUM, Refined Kitten, COBALT TRINITY, G0064, ATK35, TA451

Last updated: 2026-07-03

0attributed CVEs

47ATT&CK techniques

0.0IDF score (tooling uniqueness)

0exclusive CVEs

—years active

About this actor

[APT33](https://attack.mitre.org/groups/G0064) is a suspected Iranian threat group that has carried out operations since at least 2013. The group has targeted organizations across multiple industries in the United States, Saudi Arabia, and South Korea, with a particular interest in the aviation and energy sectors.(Citation: FireEye APT33 Sept 2017)(Citation: FireEye APT33 Webinar Sept 2017)

Source: MITRE ATT&CK

Activity timeline

No activity events recorded.

Profile

CVE	Risk	CVSS	EPSS	Published	Products
No attributed CVEs.

Mitigating controls (NIST 800-53)

Control	Techniques covered	Coverage
`SI-4`	40 / 47	85%
`CM-2`	36 / 47	77%
`CM-6`	36 / 47	77%
`CA-7`	32 / 47	68%
`SI-3`	30 / 47	64%
`CM-7`	24 / 47	51%
`AC-4`	23 / 47	49%
`AC-6`	23 / 47	49%
`SC-7`	23 / 47	49%
`AC-2`	21 / 47	45%
`AC-3`	20 / 47	43%
`IA-2`	17 / 47	36%
`AC-5`	16 / 47	34%
`SI-2`	16 / 47	34%
`IA-5`	13 / 47	28%

Co-occurring actors

None.

Similar actors

Similar TTPs

FIN8 0.36
MuddyWater 0.33
BRONZE BUTLER 0.33
Inception 0.33
RedCurl 0.32