SmudgedSerpent is a apt_group tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed November 5, 2025; most recent activity November 5, 2025.
SmudgedSerpent is described as a mysterious APT group observed targeting U.S. policy experts, with activity framed within Iran-related geopolitical tensions. The group’s enigmatic attribution and focused targeting of policymakers underscore its significance as a potential tool for cyber espionage and influence operations in high-stakes diplomatic contexts.
Between June and August 2025, a cyber group identified as UNK_SmudgedSerpent targeted U.S. academics and foreign policy experts focused on Iran. The attackers initiated contact through seemingly benign conversations to…