Also known as: Cleaver, Threat Group 2889, TG-2889
Iran
Active Since
2017
MITRE ID
G0003
Techniques
5
[Cleaver](https://attack.mitre.org/groups/G0003) is a threat group that has been attributed to Iranian actors and is responsible for activity tracked as Operation Cleaver. (Citation: Cylance Cleaver) Strong circumstantial evidence suggests Cleaver is linked to Threat Group 2889 (TG-2889). (Citation: Dell Threat Group 2889)
No victims recorded in ransomware.live for this group.