Uptime Hamster: 106d 7h 4mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza Bohrium

Bohrium

0 incidentes 0 paises 0 sectores apt IR Ultimo: -
Aliases: IMPERIAL KITTEN, Smoke Sandstorm, DEV-0056, otros, dominios relacionados con seguridad informática
Ver en IntelTracker → APTTrail →
Bohrium is an Iranian state-sponsored threat actor primarily focused on cyber espionage, with operations documented since at least 2017. The group is known for collecting sensitive information from high-value targets. Bohrium is closely associated with Iran's Islamic Revolutionary Guard Corps (IRGC) and is also tracked under several other names, including IMPERIAL KITTEN and Smoke Sandstorm, which sometimes creates confusion with other unrelated threat groups. A defining characteristic of Bohrium's operations is its use of social engineering, particularly by creating fake social media profiles posing as recruiters to initiate targeted spear-phishing campaigns. The group consistently seeks to obtain intelligence to further Iranian geopolitical objectives.

Aliases del actor

IMPERIAL KITTENSmoke SandstormDEV-0056otrosdominios relacionados con seguridad informática

Actores similares

Fox Kittenthreat-actor · 1Magic Kittenapt · 0Flash Kittenapt · 0Ferocious Kittenthreat-actor · 0Caracal Kittenapt · 0Rampant Kittenapt · 0TRACER KITTENapt · 0Rocket Kittenapt · 0Domestic Kittenapt · 0Cutting Kittenapt · 0
Motivacion
Information theft and espionage
Tecnicas MITRE
T1204.002, T1059.001, T1598, T1566.003, T1584.004 - Server, T1583.004
Tipo
apt
Pais origen
IR
Motivacion
Information theft and espionage
Impacto
27
Actualizado
Sat, 18 No

Sectores objetivo (OSINT)

Energy & Utilities Transportation&WarehousingInformation ServicesEducational ServicesPublic AdministrationSoftware PublishersReligious OrganizationsGrantmaking and Giving ServicesNational Security and International AffairsData Processing, Hosting, and Related Services