Charming Kitten

🔴 High
Also known as: Newscaster, Parastoo, iKittens, Group 83, NewsBeef, G0058, CharmingCypress, Mint Sandstorm, Charming Kitten

Charming Kitten (aka Parastoo, aka Newscaster) is an group with a suspected nexus to Iran that targets organizations involved in government, defense technology, military, and diplomacy sectors.

🌍 Country Iran
Risk Level High
🎯 Incident Type Espionage
Defense Diplomacy Military Technology Government, Administration Government

Introduction

Charming Kitten (aka Parastoo, aka Newscaster) is an group with a suspected nexus to Iran that targets organizations involved in government, defense technology, military, and diplomacy sectors.

Activities and Tactics

Targeted Sectors: Defense, Diplomacy, Military, Technology, Government, Administration, Government

Country of Origin: 🇮🇷 Iran

Risk Level: High

Incident Type: Espionage

Suspected Victims: U.S. government/defense sector websites, Saudi Arabia, Israel, Iraq, United Kingdom

Notable Campaigns

Information pending cataloguing.

Tactics, Techniques, and Procedures (TTPs)

Information pending cataloguing.

Notable Indicators of Compromise (IOCs)

No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.

Malware and Tools

  • Parasite-HTTP-RAT

Attribution and Evidence

Country of Origin: Iran Additional attribution information pending cataloguing.

References

References pending cataloguing.