APT42
actor · actor:apt42
Iranian MOIS/IRGC-aligned espionage and social-engineering actor. Per Google GTIG (reported via Recorded Future/Insikt Group, 2026-07-16) it uses Gemini as an engineering platform to accelerate development of specialized malicious tools and feeds the model target biographies to script multi-turn rapport-building phishing conversations before payload delivery.
Aliases: GreenBravo, Charming Kitten, Mint Sandstorm, CALANQUE ION
Coverage
0
first 2026-07-19 → last –
no data
Latest activity
–
no entry about it yet
Peak priority
·
no entry about it yet
Targets
·
no sector or region stated
Sources cited
0
0 hosts
Story timeline
No published entries reference this entity yet.
Entries about APT42
No published entry is about this entity yet · an entry attaches by registry key, by the entity's name or a public alias in its title or body, or (for CVE entities) by exact CVE id.