Helix Kitten

Helix Kitten is a hacker group identified by CrowdStrike as Iranian.

History

The group has reportedly been active since at least 2014. It has targeted many of the same organizations as Advanced Persistent Threat 33, according to John Hultquist.
In April 2019, APT34's cyber-espionage tools' source code was leaked through Telegram.

Targets

The group has reportedly targeted organizations in the financial, energy, telecommunications, and chemical industries, as well as critical infrastructure systems.

Techniques

APT34 reportedly uses Microsoft Excel macros, PowerShell-based exploits and social engineering to gain access to its targets.