Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknown

AppMilad

AppMilad is an Iran-attributed threat actor group, tracked by Brandefense.

Request IOC feedRequest ATT&CK export
Origin
Iran
Techniques
0
Exploited CVEs
No CVE data
Record updated

About AppMilad.

AppMilad is an Iranian hacking group that has been identified as the source of a spyware campaign called RatMilad. This spyware is designed to silently infiltrate victims' devices and gather personal and corporate information, including private communications and photos. The group has been distributing the spyware through fake apps and targeting primarily Middle Eastern enterprises.

Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.