logo

Charming Kitten APT Tries Spying on Israeli Cybersecurity Experts

ID: 46d800c8-0193-52f0-99db-aa586b0b5e0f

STIX ID: report--46d800c8-0193-52f0-99db-aa586b0b5e0f

Feed Name: Dark Reading

Threat Score
82/100

Date Published: 2025-06-26

Date Updated: 2026-04-21

Author: Nate Nelson, Contributing Writer

...
...

Charming Kitten (aka APT42/Educated Manticore), an Iran-linked state-sponsored actor, is conducting a targeted spear-phishing campaign against Israeli cybersecurity and computer-science experts using impersonation (journalist/researcher personas), WhatsApp and email outreach, meeting lures that lead to credential-phishing pages (including Google Meet/Gmail mimics), and rapidly rotated infrastructure comprising over 100 domains — a focused, high-sophistication espionage effort likely aimed at intelligence collection and retaliation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.