DarkHydrus
DarkHydrus is an Iran-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Government, and Education and Research sectors in 10 countries, including the United Arab Emirates and Egypt. It uses 31 MITRE ATT&CK techniques and exploits 5 known CVEs.
Also known as
- LazyMeerkat
- ATK 77
- Obscure Serpens
- G0079
- Origin
- Iran
- Techniques
- 31
- Exploited CVEs
- 5
- First seen
- Jan 1, 2016
- Last seen
- Jan 18, 2019
- Record updated
Who They Target.
Sectors · 2
Labelsespionagemena
About DarkHydrus.
DarkHydrus is a threat group that has targeted government agencies and educational institutions in the Middle East since at least 2016. The group heavily leverages open-source tools and custom payloads for carrying out attacks.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.