APT42
APT42 is an Iran-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 19 countries, including the United States and the United Kingdom. It uses 112 MITRE ATT&CK techniques and exploits 6 known CVEs.
Also known as
- GreenBravo
- Origin
- Iran
- Techniques
- 112
- Exploited CVEs
- 6
- First seen
- Jan 1, 2015
- Last seen
- Feb 12, 2026
- Record updated
Who They Target.
Sectors · 14
Labelsespionagemena
About APT42.
APT42 is an Iranian-sponsored threat group that conducts cyber espionage and surveillance. The group primarily focuses on targets in the Middle East region, but has targeted a variety of industries and countries since at least 2015.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.