Greenbug, Volatile Kitten
Greenbug, Volatile Kitten is an Iran-attributed threat actor group, tracked by Brandefense.
- Greenbug
- Volatile Kitten
- Origin
- Iran
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
About Greenbug, Volatile Kitten.
A subgroup of 'OilRig, APT 34, Helix Kitten, Chrysene'. Shamoon (W32.Disttrack) first made headlines in 2012 when it was used in attacks against energy companies in Saudi Arabia. It recently resurfaced in November 2016 (W32.Disttrack.B), again attacking targets in Saudi Arabia. While these attacks were covered extensively in the media, how the attackers stole these credentials and introduced W32.Disttrack on targeted organizations’ networks remains a mystery. Could Greenbug be responsible for getting Shamoon those stolen credentials? Although there is no definitive link between Greenbug and Shamoon, the group compromised at least one administrator computer within a Shamoon-targeted organization’s network prior to W32.Disttrack.B being deployed on November 17, 2016.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.