The-Kittens-are-Back-in-Town-3.pdf

**Executive Summary:** ClearSky describes a targeted Charming Kitten (APT35) campaign (Aug 2020) that impersonates DW and the Jewish Journal, uses email plus WhatsApp and LinkedIn to build trust (including phone calls), hosts personalized phishing pages on a compromised dw.de subpage to harvest credentials and sometimes sends malicious ZIP attachments; the report contains full social-engineering transcripts, screenshots, IoCs and analysis of the novel WhatsApp/LinkedIn TTP.