MAGNALLIUM, also known as APT33, is an Iranian state-sponsored cyber espionage group active since at least 2013. The group primarily focuses on information theft and espionage, with demonstrated capabilities for sabotage and destructive operations. MAGNALLIUM systematically targets organizations in sectors critical to Iran's strategic interests, including aerospace, energy, petrochemical, and defense. This group distinguishes itself through its consistent use of custom malware alongside publicly available tools and a notable adaptability in leveraging cloud infrastructure for command and control operations, often during geopolitical tensions. MAGNALLIUM is tracked under numerous aliases by security vendors, including Elfin, Peach Sandstorm, Refined Kitten, and Holmium.