Iranian cyber espionage against HBO, human rights activists, academic researchers and media outlets
released on 2017-12-05 @ 05:23:45 PM
Charming Kitten is an Iranian cyberespionage group operating since approximately 2014. This report exposes
their vast espionage apparatus, active during 2016-2017. We present incidents of company impersonation,
made up organizations and individuals, spear phishing and watering hole attacks. We analyze their
exploitation, delivery, and command-and-control infrastructure, and expose DownPaper, a malware
developed by the attackers, which has not been publicly documented to date.