Charming Kitten
threat actorIR01
also known as
Other names and identifiers for this entity.
MISP
Charming Kitten · CharmingCypress · Group 83 · Mint Sandstorm · NewsBeef · Newscaster · Parastoo · iKittens
Charming Kitten (aka Parastoo, aka Newscaster) is an group with a suspected nexus to Iran that targets organizations involved in government, defense technology, military, and diplomacy sectors.
02
related actors
Related entries.
- APT42· likely
- CHRYSENE· likely
- Cleaver· likely
- Clever Kitten· likely
- Flying Kitten· likely
- OilRig· likely
- Rocket Kitten· likely
- TA453· likely
03
references
External citations — patches, advisories, analysis.
- https://en.wikipedia.org/wiki/Operation_Newscaster
- https://iranthreats.github.io/resources/macdownloader-macos-malware/
- https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2014/2014.05.28.NewsCaster_An_Iranian_Threat_Within_Social_Networks/file-2581720763-pdf.pdf
- https://www.forbes.com/sites/thomasbrewster/2017/07/27/iran-hackers-oilrig-use-fake-personas-on-facebook-linkedin-for-cyberespionage/
- https://cryptome.org/2012/11/parastoo-hacks-iaea.htm
- https://securelist.com/files/2017/03/Report_Shamoon_StoneDrill_final.pdf
- https://securelist.com/blog/software/74503/freezer-paper-around-free-meat/
- https://www.verfassungsschutz.de/download/broschuere-2016-10-bfv-cyber-brief-2016-04.pdf