Google: Iran's Charming Kitten Targets US Presidential Elections, Israeli Military

Google TAG reports that Iran-linked APT42 (Charming Kitten) is conducting persistent, politically motivated phishing campaigns against personal email accounts tied to U.S. election figures and a broad set of Israeli targets (military, diplomats, academics, NGOs). The group uses socially engineered lures — fake Google Sites/Meet pages, benign PDF attachments with shortened links, and redirects to phishing kits — to harvest Google credentials; Google disrupted multiple campaigns, suspended attacker accounts, and published IoCs. Activity is ongoing and expected to continue as regional tensions rise.