Skip to content
Nation-state APTEspionageAdvanced sophistication · State-backed

Rampant Kitten

Rampant Kitten is an Iran-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets organisations in Sweden.

Origin
Iran
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2014
Last seen
Jul 1, 2020
Record updated

Who They Target.

Countries · 1

About Rampant Kitten.

Its victimology is Iranian dissidents, minorities and expatriates, including supporters of Mujahedin-e Khalq (MEK, based in Albania) and the Azerbaijan National Resistance Organization. It should not be conflated with other Iranian clusters such as Charming Kitten (APT35/Phosphorus), APT42, or Pioneer/Fox Kitten, which have different tooling and victimology.

Last updated Oct 14, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.