Threat actor · all actors
Soldiers of SolomonHACK-SOLDIERS-OF-SOLOMON hacktivist
aka Soldiers of Solomon, Soldiers of Solomon Group, Edalat-e Ali ally
Last updated: 2026-10-16
1attributed CVEs
0ATT&CK techniques
3.2IDF score (tooling uniqueness)
0exclusive CVEs
2021–2026years active
About this actor
An anti-Iranian-regime hacktivist persona that surfaced in late 2020, claiming the leak of Iranian Atomic Energy Organization documents and disruption of state energy infrastructure. Activity pattern parallels Predatory Sparrow's operational tempo; analysts have not publicly linked the two.
How we know this
- Data origin
- Curated overlay Hacktivist entry synthesised from public reporting — not a MITRE-tracked intrusion set.
- Techniques
- No ATT&CK techniques mapped.
- Named victims
- 1 extracted from reporting.
Thin data: No ATT&CK techniques are mapped yet — the behavioural profile is empty. Only one named victim is on file.
See how actor data is built for the full pipeline.
Activity timeline
CVE publishedKEV added
- 2026 — 1 KEV added
- 2021 — 1 CVE published
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
CVE-2021-22681 KEV | 9.9 | 9.8 | 0.6363 | 2021-03-03 | see CVE |
No techniques attributed.
Co-occurring actors
- Cyber Av3ngers 1 shared CVEs
- AnonOps 1 shared CVEs
- Storm-0784 1 shared CVEs
- SuchSecurity Ransomware 1 shared CVEs
Similar actors
Overlapping CVEs
- Storm-0784 1.00
- SuchSecurity Ransomware 1.00
- Cyber Av3ngers 1.00
- AnonOps 0.00
Active in same years
Same category
- Moses Staff 1.00
- Al-Toufan 1.00
- AnonOps 1.00
- Anonymous Brasil 1.00
- Anonymous Collective 1.00