Iranian Hackers Charming Kitten Utilize POWERSTAR Backdoor in Targeted Espionage Attacks

Charming Kitten, the nation-state actor affiliated with Iran's Islamic Revolutionary Guard Corps (IRGC), has been attributed to a bespoke spear-phishing campaign that delivers an updated version of a fully-featured PowerShell backdoor called POWERSTAR.
"There have been improved operational security measures placed in the malware to make it more difficult to analyze and collect intelligence,"

actor attacks backdoor called campaign charming kitten espionage featured guard hackers iran iranian iranian hackers irgc malware nation nation-state actor operational operational security phishing phishing campaign powershell powershell backdoor security state version