APT33

Reported Context (9)

Previously used name mapped to the new name BLEAK ION. Google Threat Intelligence Group Introduces Unified Threat Actor Naming System
Reportedly deployed Shamoon 4.0 against Saudi energy workstations. CloudSek Report Warns of Iranian-Linked Cyber Pre-Positioning Across Gulf Networks
Iranian state-sponsored group described as having historically pre-positioned inside target networks. CloudSEK Warns Exposed MLOps Platforms Could Enable AI Pipeline Sabotage
Identified by the report as an Iranian state-sponsored group with pre-positioned infrastructure that may be activated against US-aligned targets and regional sectors. Briefing Warns Iran-Israel War Could Raise Cyber Risks Across Southeast Asia
Iranian state-linked group associated with password spraying against US electric utilities and oil and gas operators; the source identifies Elfin as an alternate name. AI-Assisted Reconnaissance Lowers Barriers to Targeting Exposed US Industrial Systems

CVE (6)

Malware (23)

People (3)

Threat Actors (107)

MITRE ATT&CK (18)

Vendors (28)

Products (41)

Tools (14)

Industries (24)

Countries (26)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.