KINWILDER

Charming Kitten

No sourced public emblem in this profile.

reference profile · reported nexus: IR (not nationality)

Charming Kitten (aka Parastoo, aka Newscaster) is an group with a suspected nexus to Iran that targets organizations involved in government, defense technology, military, and diplomacy sectors.

Source-reported aliases: Newscaster, Parastoo, iKittens, Group 83, NewsBeef, G0058, CharmingCypress, Mint Sandstorm. Associations do not prove equivalence.

Target geography

Catalog-listed countries (associations, not attack counts): Saudi Arabia · Israel · Iraq · United Kingdom

No bound claim-post feed for this label.

Historical casebook

No dated record curated yet; absence does not establish inactivity.

Planned Kinwilder coverage

Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.

No assigned review window.

References

Pinned source catalog

https://en.wikipedia.org/wiki/Operation_Newscaster

https://iranthreats.github.io/resources/macdownloader-macos-malware/

https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2014/2014.05.28.NewsCaster_An_Iranian_Threat_Within_Social_Networks/file-2581720763-pdf.pdf

https://www.forbes.com/sites/thomasbrewster/2017/07/27/iran-hackers-oilrig-use-fake-personas-on-facebook-linkedin-for-cyberespionage/

https://cryptome.org/2012/11/parastoo-hacks-iaea.htm

https://securelist.com/files/2017/03/Report_Shamoon_StoneDrill_final.pdf

https://securelist.com/blog/software/74503/freezer-paper-around-free-meat/

https://www.verfassungsschutz.de/download/broschuere-2016-10-bfv-cyber-brief-2016-04.pdf

https://www.cfr.org/interactive/cyber-operations/newscaster

https://www.washingtontimes.com/news/2014/may/29/iranian-hackers-sucker-punch-us-defense-heads-crea/

https://securelist.com/freezer-paper-around-free-meat/74503/

https://www.scmagazine.com/home/security-news/cybercrime/hbo-breach-accomplished-with-hard-work-by-hacker-poor-security-practices-by-victim/

https://cyware.com/news/iranian-apt-charming-kitten-impersonates-clearsky-the-security-firm-that-uncovered-its-campaigns-7fea0b4f

https://blog.certfa.com/posts/the-return-of-the-charming-kitten/

https://www.justice.gov/opa/pr/former-us-counterintelligence-agent-charged-espionage-behalf-iran-four-iranians-charged-cyber

https://blogs.microsoft.com/on-the-issues/2019/03/27/new-steps-to-protect-customers-from-hacking/

Submission and profile-update guide · Publisher API

Editorial standard · root@kinwilder.com · RSS · Outpost