BellaCPP: Discovering a new BellaCiao variant written in C++

This report examines the BellaCiao malware family and a C++ variant named BellaCPP discovered on the same infected host, describing PDB-derived versioning, compilation timestamps, file metadata, domain-generation and DNS-based C2 checks, likely SSH-tunneling behavior, and provides multiple hashes and a domain IOC; the authors attribute the activity to the Charming Kitten APT with medium-to-high confidence.