August 15, 2024 at 01:29PM
A threat group linked to Iran’s IRGC has launched cyberattacks against US election-related email accounts and Israeli military and political targets. Google’s TAG detected and blocked attempts by the Iran-backed APT42, known as Charming Kitten, targeting individuals affiliated with US government and the presidential campaigns. The attacks are in retaliation for US support for Israel and are expected to continue.
The meeting notes report that a threat group linked to Iran’s Islamic Revolutionary Guard Corps (IRGC), known as APT42 or Charming Kitten, has launched a series of cyberattacks. These attacks include phishing campaigns targeting email accounts associated with the US presidential election, high-profile military and political targets in Israel, prominent individuals associated with President Biden, former President Trump, and current US Vice President and now presidential candidate Kamala Harris. Additionally, the group has engaged in phishing campaigns against Israeli military and political targets, with a particular emphasis on utilizing Google Sites to launch attacks. The meeting notes also highlighted that APT42 is likely to continue its politically motivated cyberattacks in the US and Israel, and provided indicators of compromise (IoCs) to help organizations to remain vigilant against these threat campaigns.