What other aliases and vendor names is APT34 known by?

APT34 is tracked across the cybersecurity industry by multiple aliases, including: G0057.

What vulnerabilities and CVEs does APT34 actively exploit?

APT34 has been observed weaponizing vulnerabilities including CVE-2024-30088.

APT34

Q: What are the primary motivations and sponsors of APT34?

APT34 operates from Iran with primary motivation categorized as Strategic cyber-espionage, intelligence collection, and pre-positioning for potential disruptive operations to advance Iranian geopolitical interests., sponsored or affiliated with Ministry of Intelligence and Security (MOIS) of the Islamic Republic of Iran.

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat Iran

Primary Aliases: G0057

Sponsor / State Affiliation Ministry of Intelligence and Security (MOIS) of the Islamic Republic of Iran

Primary Motivation Strategic cyber-espionage, intelligence collection, and pre-positioning for potential disruptive operations to advance Iranian geopolitical interests.

Active Timeline Unknown – Present

Confidence Rating 95% (Grounded)

STEALHOOK / CVE-2024-30088 Exploitation, Pre-operational Infrastructure Staging, Post-October 7 Geopolitical Expansion