Cataloged
IdentityAlias: Operation Woolen-Goldfish
Reviewed identity mapping approved on this date.
Ajax Security Team
Also known as Operation Woolen-Goldfish, AjaxTM, Rocket Kitten, Flying Kitten, Operation Saffron Rose
Tracked as
G0130
Ajax Security Team is a group that has been active since at least 2010 and believed to be operating out of Iran. By 2014 Ajax Security Team transitioned from website defacement operations to malware-based cyber espionage campaigns targeting the US defense industrial base and Iranian users of anti-censorship technologies.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Cataloged
IdentityAlias: AjaxTM
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Rocket Kitten
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Flying Kitten
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Operation Saffron Rose
Reviewed identity mapping approved on this date.
Cataloged
IdentityTracking identifier: G0130
Reviewed identity mapping approved on this date.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
Ajax Security TeamCanonical Name
AjaxTMAlias
Flying KittenAlias
Operation Saffron RoseAlias
Operation Woolen-GoldfishAlias
Rocket KittenAlias
G0130Tracking Id
Loading CVEs, techniques, indicators, malware, victims, and activity...