The Return of The Charming Kitten

This report analyzes a state-backed phishing campaign attributed to Charming Kitten, detailing deceptive techniques (fake alerts, fake Google Drive pages, on-the-fly credential harvesting) and infrastructure used to target political figures, journalists, and human rights activists, and it offers defensive recommendations for tech companies, policymakers, and users.