Cataloged
IdentityAlias: Mantis
Reviewed identity mapping approved on this date.
APT-C-23
Also known as Mantis, Arid Viper, Desert Falcon, TAG-63, Grey Karkadann, Big Bang APT, Two-tailed Scorpion
Tracked as
G1028
APT-C-23 is a threat group that has been active since at least 2014. APT-C-23 has primarily focused its operations on the Middle East, including Israeli military assets. APT-C-23 has developed mobile spyware targeting Android and iOS devices since 2017.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Cataloged
IdentityAlias: Arid Viper
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Desert Falcon
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: TAG-63
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Grey Karkadann
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Big Bang APT
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Two-tailed Scorpion
Reviewed identity mapping approved on this date.
Cataloged
IdentityTracking identifier: G1028
Reviewed identity mapping approved on this date.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
APT-C-23Canonical Name
Arid ViperAlias
Big Bang APTAlias
Desert FalconAlias
Grey KarkadannAlias
MantisAlias
TAG-63Alias
Two-tailed ScorpionAlias
G1028Tracking Id
Loading CVEs, techniques, indicators, malware, victims, and activity...