CharmingCypress Use Poisoned VPN Apps to Install Backdoor

Threat actors of Iranian origin, CharmingCypress (also known as Charming Kitten, APT42, TA453), have gathered political intelligence against international targets, with a special emphasis on journalists, think tanks, and NGOs. CharmingCypress frequently uses novel social-engineering techniques in its phishing efforts, like emailing people and holding long-lasting discussions before delivering links to malicious content.  Recently, malware-laden VPN applications […]

The post CharmingCypress Use Poisoned VPN Apps to Install Backdoor appeared first on Cyber Security News.

apps apt42 backdoor charming kitten cyber security discussions engineering install intelligence international iranian journalists links malicious malware ngos novel origin people phishing political social special ta453 techniques think tanks threat threat actors vpn