Leafminer
Leafminer is an Iran-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 10 sectors, including Government and Manufacturing, in 15 countries, including the United States and South Korea. It uses 20 MITRE ATT&CK techniques and exploits 1 known CVE.
Also known as
- Raspite
- Flash Kitten
- G0077
- Origin
- Iran
- Techniques
- 20
- Exploited CVEs
- 1
- First seen
- Jan 1, 2017
- Last seen
- Aug 2, 2018
- Record updated
Who They Target.
Sectors · 10
Labelsespionagemena
About Leafminer.
Leafminer is an Iranian threat group that has targeted government organizations and business entities in the Middle East since at least early 2017.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.