What other aliases and vendor names is APT35 known by?

APT35 is tracked across the cybersecurity industry by multiple aliases, including: Agent Serpens, Ajax Security, Ballistic Bobcat, Charming Kitten, CharmingCypress, COBALT ILLUSION, COBALT MIRAGE, Educated Manticore.

APT35

Q: What are the primary motivations and sponsors of APT35?

APT35 operates from Iran with primary motivation categorized as Strategic espionage, political intelligence, and transnational repression of dissidents, sponsored or affiliated with Islamic Revolutionary Guard Corps (IRGC).

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat Iran

Primary Aliases: Charming Kitten Mint Sandstorm Agent Serpens Ajax Security

Sponsor / State Affiliation Islamic Revolutionary Guard Corps (IRGC)

Primary Motivation Strategic espionage, political intelligence, and transnational repression of dissidents

Active Timeline Unknown – Present

Confidence Rating 95% (Grounded)

Model Agency Impersonation, High-Profile Academic Targeting, AI-Powered Israeli Tech Targeting

⚔️ Weaponized CVE Matrix (0)

No specific weaponized CVEs currently mapped in the public baseline.

🎯 Target Sectors & Focus

Government Agencies Diplomatic Missions Defense Industrial Base Think Tanks Academic Institutions Journalists Political Dissidents Israeli Government and Military Critical Infrastructure (Energy, Transit, Utilities)