G0003 · 5 ATT&CK techniques · 0 correlated reports

Cleaver

Aliases: Threat Group 2889, TG-2889

Cleaver is a threat group that has been attributed to Iranian actors and is responsible for activity tracked as Operation Cleaver. Strong circumstantial evidence suggests Cleaver is linked to Threat Group 2889 (TG-2889).

Open interactive actor investigation

ATT&CK techniques

T1003.001
LSASS MemoryT1557.002
ARP Cache PoisoningT1588.002
ToolT1587.001
MalwareT1585.001
Social Media Accounts

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research