Predatory Sparrow, also known by its Persian name Gonjeshke Darande, is a politically motivated threat actor that publicly emerged in July 2021 with an attack on Iran's Ministry of Roads and Urban Development. The group is widely believed, with moderate confidence, to operate with Israeli backing, though it presents itself as an Iranian hacktivist force. Their primary motivation is to destabilize the Iranian regime and express opposition to its policies by targeting critical infrastructure and financial institutions. What sets Predatory Sparrow apart is its consistent use of destructive cyber operations, including wiper malware, to cause physical damage and widespread disruption within Iran, often issuing public political statements alongside their attacks rather than seeking financial gain. They have also been associated, with partial overlap in malware code, with the alias Indra, though this connection is less pronounced in public reporting.

Aliases del actor

Gonjeshke DarandeIndramalpedia

Actores similares

predatory-sparrowactor · 1famoussparrowactor · 2apt-indraactor · 1Scripted Sparrowapt · 0