CopyKittens, also known by the aliases G0052, Slayer Kitten, and Rocket Kittens, is an Iranian state-sponsored cyber espionage group that commenced operations in 2013. The group's primary motivation is information theft and espionage, focusing on strategic targets in the Middle East, Europe, and North America. They gained notoriety for the extensive 'Operation Wilted Tulip' campaign, which involved sophisticated multi-stage attacks. A distinguishing characteristic of CopyKittens is their persistent operational methodology, often leveraging a combination of custom-developed malware and commercially available penetration testing tools.