US Intelligence Blames Iran for Hack on Trump Campaign

August 20, 2024 at 11:43AM The FBI confirmed Iran’s involvement in cyberattacks on former President Donald Trump’s adviser, part of a wider campaign targeting US 2024 presidential elections. Security agencies attributed the attacks to “increasingly aggressive Iranian activity” and warned of continued efforts to disrupt the election. This follows previous reports by Microsoft and Google, … Read more

Google: Iran’s Charming Kitten Targets US Presidential Elections, Israeli Military

August 15, 2024 at 01:29PM A threat group linked to Iran’s IRGC has launched cyberattacks against US election-related email accounts and Israeli military and political targets. Google’s TAG detected and blocked attempts by the Iran-backed APT42, known as Charming Kitten, targeting individuals affiliated with US government and the presidential campaigns. The attacks are in retaliation … Read more

Name That Edge Toon: How Charming

March 4, 2024 at 11:07AM Be cautious when joining webinars due to the potential for network compromise. Submit your clever cybersecurity-related caption to win a $25 Amazon gift card before the March 27, 2024 deadline. Send ideas to [email protected] or via social media. Congratulations to Matt Tompkins, last month’s winner of “The Great Escape” contest. … Read more

Iran-Backed Charming Kitten Stages Fake Webinar Platform to Ensnare Targets

February 22, 2024 at 10:21AM State-sponsored cyber operations are increasingly targeting policy experts in the Middle East and Ukraine. Charming Kitten/CharmingCypress, an Iran-linked group, employs social engineering tactics and malware to compromise targets. Other groups, such as ColdRiver and Jordan-based actors, have also used similar methods to target experts. Volexity advises experts to be vigilant … Read more

Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor

February 18, 2024 at 11:57PM Charming Kitten, an Iranian-origin threat actor also known as APT35, has been linked to new attacks aimed at Middle East policy experts using a new backdoor called BASICSTAR through a fake webinar portal. The group, affiliated with Iran’s Revolutionary Guard Corps, uses a range of social engineering tactics, including phishing … Read more

Microsoft: Iran’s Mint Sandstorm APT Blasts Educators, Researchers

January 19, 2024 at 12:44PM Iran-linked Mint Sandstorm group targets professionals in Middle Eastern affairs with sophisticated social engineering tactics, delivering malware and compromising systems. The group, tied to the Iranian military, uses lures related to Israel-Hamas war for cyber-espionage and is known for its persistent efforts. It impersonates journalists and researchers, employs custom backdoors, … Read more