Pioneer Kitten
Pioneer Kitten is an Iran-attributed nation-state APT group with an ideological motive, tracked by Brandefense. It targets 13 sectors, including Government and Technology, in 25 countries, including the United States and the United Kingdom. It uses 67 MITRE ATT&CK techniques and exploits 17 known CVEs.
Also known as
- UNC757
- Parisite
- RUBIDIUM
- Lemon Sandstorm
- Br0k3r
- Fox Kitten
- Cobalt Foxglove
- G0117
- Iranian hackers
- Origin
- Iran
- Techniques
- 67
- Exploited CVEs
- 17
- First seen
- Jan 1, 2017
- Last seen
- Feb 1, 2025
- Record updated
Who They Target.
Sectors · 13
Labelsespionagemena
About Pioneer Kitten.
Reportedly targeting critical infrastructure organizations, stealing credentials and network data, which they later sell on cybercriminal forums. They act as initial access brokers and collaborate with ransomware affiliates.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.