Cataloged
IdentityTracking identifier: G0059
Reviewed identity mapping approved on this date.
Magic Hound
Also known as TA453, COBALT ILLUSION, Charming Kitten, ITG18, Phosphorus, Newscaster, APT35, Mint Sandstorm
Tracked as
G0059
Magic Hound is an Iranian-sponsored threat group that conducts long term, resource-intensive cyber espionage operations, likely on behalf of the Islamic Revolutionary Guard Corps. They have targeted European, U.S., and Middle Eastern government and military personnel, academics, journalists, and organizations such as the World Health Organization (WHO), via complex social engineering campaigns since at least 2014.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Cataloged
IdentityAlias: TA453
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: COBALT ILLUSION
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Charming Kitten
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: ITG18
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Phosphorus
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Newscaster
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: APT35
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Mint Sandstorm
Reviewed identity mapping approved on this date.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
Magic HoundCanonical Name
APT35Alias
COBALT ILLUSIONAlias
Charming KittenAlias
ITG18Alias
Mint SandstormAlias
NewscasterAlias
PhosphorusAlias
TA453Alias
G0059Tracking Id
Loading CVEs, techniques, indicators, malware, victims, and activity...