logo

The-Kittens-Are-Back-in-Town-Charming-Kitten-2019.pdf

ID: ff978009-4b0a-4e0f-b6f2-0a28b766b42c

STIX ID: report--ff978009-4b0a-4e0f-b6f2-0a28b766b42c

Threat Score

85/100

Uploaded: 2026-08-11

Published Date: 2019-09-15

Last Modified Date: 2019-09-15

Created by: dogesec

TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
Charming Kitten (APT35) conducted targeted spear-phishing against academic researchers and dissidents in 2019 using impersonation emails (journalists, researchers), credential-harvesting decoy sites impersonating Google, Instagram and media outlets, and embedded email trackers that exfiltrate IP/geolocation and cookies; ClearSky documents associated domains, IPs, infrastructure fingerprints, and observable TTPs and indicators.