APT35
APT35 is an Iran-attributed nation-state APT group with an ideological motive, tracked by Brandefense. It targets 18 sectors, including Government and Technology, in 60 countries, including the United States and the United Kingdom. It uses 179 MITRE ATT&CK techniques and exploits 50 known CVEs.
Also known as
- COBALT ILLUSION
- ITG18
- Phosphorus
- Newscaster
- Mint Sandstorm
- TA453
- Charming Kitten
- Origin
- Iran
- Techniques
- 179
- Exploited CVEs
- 50
- First seen
- Jul 28, 2025
- Last seen
- Dec 3, 2025
- Record updated
Who They Target.
Sectors · 18
Countries · 60
Labelsespionagemena
About APT35.
Iranian state-backed hacking group, also known as Charming Kitten or Phosphorus.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.