Predatory Sparrow

Also known as: Indra, Gonjeshke Darande, Predatory Sparrow, گنجشک درنده, GonjeshkDarand, Gonjeshk Darand

A self-proclaimed hacktivist group that carried out attacks against Iranian railway systems and against Iranian steel plants.

🌍 Country Iran
🎯 Incident Type Sabotage
Critical manufacturing Transportation systems

Introduction

A self-proclaimed hacktivist group that carried out attacks against Iranian railway systems and against Iranian steel plants.

Activities and Tactics

Targeted Sectors: Critical manufacturing, Transportation systems

Country of Origin: 🇮🇷 Iran

Incident Type: Sabotage

Suspected Victims: Iran

Notable Campaigns

Information pending cataloguing.

Tactics, Techniques, and Procedures (TTPs)

Information pending cataloguing.

Notable Indicators of Compromise (IOCs)

No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.

Malware and Tools

  • CyberGate:
  • Predator Pain:
  • Cyber Eye RAT:

Attribution and Evidence

Country of Origin: Iran Additional attribution information pending cataloguing.

References

References pending cataloguing.