CopyKittens
CopyKittens is an Iran-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 11 sectors, including Government and Technology, in 8 countries, including the United States and Germany. It uses 9 MITRE ATT&CK techniques and exploits 1 known CVE.
Also known as
- Slayer Kitten
- G0052
- Operation “Wilted Tulip”
- Origin
- Iran
- Techniques
- 9
- Exploited CVEs
- 1
- First seen
- Jan 1, 2013
- Last seen
- Jun 2, 2022
- Record updated
Who They Target.
Sectors · 11
Labelsespionagemena
About CopyKittens.
CopyKittens is an Iranian cyber espionage group that has been operating since at least 2013. It has targeted countries including Israel, Saudi Arabia, Turkey, the U.S., Jordan, and Germany.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.