Do Son Proofpoint reveals Iran-aligned TA453 is exploiting Operation Epic Fury to launch targeted credential phishing campaigns against U.S. think tanks.
Charming Kitten
A massive leak exposes Iran's Department 40 (APT35). Discover how IRGC hackers build target packages for assassination squads and drone strikes.
A new report reveals Subtle Snail, an Iran-nexus group, is using fake LinkedIn jobs to deliver a custom backdoor for espionage against European telecom and defense firms.
Iranian APT "Educated Manticore" (APT42) uses AI-assisted spear-phishing via email/WhatsApp to target critics with React-based phishing kits, bypassing MFA and stealing credentials.
Unit 42 uncovers Iranian cyber espionage using a fake modeling agency website to selectively target victims with sophisticated techniques.
Learn about the newest variant of BellaCiao malware - BellaCPP. Discover its shift from .NET to C++ and its stealthy persistence capabilities.
APT35, also known as Magic Hound or Charming Kitten, targets aerospace and semiconductor industries. Uncover the sophisticated cyber campaign by this Iranian-backed group.
Unveiling the Iranian Dream Job campaign: How the SnailResin malware targets the aerospace industry through deceptive job offers.
Unveiling the operations of GreenCharlie, an Iran-backed APT group linked to US political campaign targeting.
Uncover the details of Cyclops, a new malware developed by the APT 35 group. Learn about its capabilities, targets, and method of operation.
APT42 operations are using two custom backdoors: NICECURL and TAMECAT. These backdoors are delivered via spear phishing
One notable aspect of CharmingCypress's tactics is their use of unusual social-engineering tactics in their phishing campaigns