November 14, 2024 at 12:53PM Iran-linked Charming Kitten hackers are targeting the aerospace sector through a ‘dream job’ campaign using SnailResin malware, as reported by SecurityWeek. **Meeting Takeaways:** 1. **Threat Actor:** Iranian-linked hackers known as Charming Kitten. 2. **Campaign Details:** The hackers have launched a ‘dream job’ campaign. 3. **Targeted Industry:** The aerospace sector is … Read more
August 20, 2024 at 11:43AM The FBI confirmed Iran’s involvement in cyberattacks on former President Donald Trump’s adviser, part of a wider campaign targeting US 2024 presidential elections. Security agencies attributed the attacks to “increasingly aggressive Iranian activity” and warned of continued efforts to disrupt the election. This follows previous reports by Microsoft and Google, … Read more
August 15, 2024 at 01:29PM A threat group linked to Iran’s IRGC has launched cyberattacks against US election-related email accounts and Israeli military and political targets. Google’s TAG detected and blocked attempts by the Iran-backed APT42, known as Charming Kitten, targeting individuals affiliated with US government and the presidential campaigns. The attacks are in retaliation … Read more
March 4, 2024 at 11:07AM Be cautious when joining webinars due to the potential for network compromise. Submit your clever cybersecurity-related caption to win a $25 Amazon gift card before the March 27, 2024 deadline. Send ideas to [email protected] or via social media. Congratulations to Matt Tompkins, last month’s winner of “The Great Escape” contest. … Read more
February 22, 2024 at 10:21AM State-sponsored cyber operations are increasingly targeting policy experts in the Middle East and Ukraine. Charming Kitten/CharmingCypress, an Iran-linked group, employs social engineering tactics and malware to compromise targets. Other groups, such as ColdRiver and Jordan-based actors, have also used similar methods to target experts. Volexity advises experts to be vigilant … Read more
February 18, 2024 at 11:57PM Charming Kitten, an Iranian-origin threat actor also known as APT35, has been linked to new attacks aimed at Middle East policy experts using a new backdoor called BASICSTAR through a fake webinar portal. The group, affiliated with Iran’s Revolutionary Guard Corps, uses a range of social engineering tactics, including phishing … Read more
January 19, 2024 at 12:44PM Iran-linked Mint Sandstorm group targets professionals in Middle Eastern affairs with sophisticated social engineering tactics, delivering malware and compromising systems. The group, tied to the Iranian military, uses lures related to Israel-Hamas war for cyber-espionage and is known for its persistent efforts. It impersonates journalists and researchers, employs custom backdoors, … Read more