The-Kittens-Are-Back-in-Town-Charming-Kitten-2019.pdf
ID: ff978009-4b0a-4e0f-b6f2-0a28b766b42c
STIX ID: report--ff978009-4b0a-4e0f-b6f2-0a28b766b42c
Threat Score
85/100
Uploaded: 2026-08-11
Published Date: 2019-09-15
Last Modified Date: 2019-09-15
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
Charming Kitten (APT35) conducted targeted spear-phishing against academic researchers and dissidents in 2019 using impersonation emails (journalists, researchers), credential-harvesting decoy sites impersonating Google, Instagram and media outlets, and embedded email trackers that exfiltrate IP/geolocation and cookies; ClearSky documents associated domains, IPs, infrastructure fingerprints, and observable TTPs and indicators.
