TAG-56 is an Iranian state-sponsored cyber espionage group, also widely tracked as APT42, Charming Kitten, TA453, UNC788, and CALANQUE. The group first emerged in 2015 and is assessed with high confidence to operate on behalf of the Islamic Revolutionary Guard Corps (IRGC) Intelligence Organization. Their primary motivation is cyber espionage and surveillance, specifically targeting individuals and organizations of strategic interest to the Iranian government. TAG-56 is particularly distinguished by its use of sophisticated social engineering and highly targeted spear-phishing campaigns, where operatives often spend weeks or months building trust with victims by impersonating journalists, researchers, or event organizers before attempting to steal credentials. This patient and rapport-building approach sets them apart from many other threat actors focused on immediate exploitation.

Actores similares

tag-22actor · 1Local Data Stagingactor · 1Contagious Interviewapt · 1TAG-124apt · 0TAG-100apt · 0TAG-28apt · 0TAG-140apt · 0TAG-112apt · 0TAG-38apt · 0