APT33
No sourced public emblem in this profile.
reference profile · reported nexus: IR (not nationality)
Our analysis reveals that APT33 is a capable group that has carried out cyber espionage operations since at least 2013. We assess APT33 works at the behest of the Iranian government.
Source-reported aliases: APT 33, Elfin, MAGNALLIUM, Refined Kitten, HOLMIUM, COBALT TRINITY, G0064, ATK35, Peach Sandstorm, TA451, BLEAK ION. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
United States of America · 
Saudi Arabia · 
South Korea
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://www.brighttalk.com/webcast/10703/275683
https://symantec-blogs.broadcom.com/blogs/threat-intelligence/elfin-apt33-espionage
https://www.secureworks.com/research/threat-profiles/cobalt-trinity
https://attack.mitre.org/groups/G0064/
https://threatconnect.com/blog/research-roundup-activity-on-previously-identified-apt33-domains/
https://www.cfr.org/interactive/cyber-operations/apt-33
https://dragos.com/media/2017-Review-Industrial-Control-System-Threats.pdf
https://dragos.com/adversaries.html
https://cloud.google.com/blog/topics/threat-intelligence/updated-cyber-threat-actor-naming-system/