Threat Actor Profile
High
APT
Description
APT-C-23is a threat group that has been active since at least 2014.[1]APT-C-23has primarily focused its operations on the Middle East, including Israeli military assets.APT-C-23has developed mobile spyware targeting Android and iOS devices since 2017.[2]
Confidence Score
Tags
mitre-attack
crawled
web-source
mitre-group
First Seen
Unknown
Last Updated
April 29, 2026
18 hours, 44 minutes ago
Active Status
ActiveCreated
April 29, 2026
MITRE ATT&CK Techniques (unmapped)
T1655
No matching TTP object yetT1660
No matching TTP object yetT1422
No matching TTP object yetIndicators of Compromise
Loading IOCs…
IOC KQL for Sentinel
STIX Data
{'aliases': [],
'description': 'APT-C-23is a threat group that has been active since at least '
'2014.[1]APT-C-23has primarily focused its operations on the '
'Middle East, including Israeli military assets.APT-C-23has '
'developed mobile spyware targeting Android and iOS devices '
'since 2017.[2]',
'external_references': [{'external_id': 'G1028',
'source_name': 'mitre-attack',
'url': 'https://attack.mitre.org/groups/G1028/'}],
'id': 'threat-actor--G1028',
'metadata': {'crawled_at': '2026-04-29T14:32:28.767518+00:00',
'mitre_group_id': 'G1028',
'page_title': 'APT-C-23, Mantis, Arid Viper, Desert Falcon, '
'TAG-63, Grey Karkadann, Big Bang APT, Two-tailed '
'Scorpion, Group G1028 | MITRE ATT&CK®'},
'name': 'APT-C-23',
'type': 'threat-actor'}