APT35, known as Charming Kitten, is an Iran-linked group specialising in credential phishing and surveillance of individuals of interest.
Key facts
- Targets journalists, academics, activists and government-linked individuals.
- Uses elaborate social-engineering and fake personas to harvest credentials.
- Focuses on surveillance and intelligence collection.
- Often impersonates trusted contacts and organisations.
Why it matters
Charming Kitten targets high-risk individuals through credential phishing. Monitoring for exposed personal and corporate credentials is an important safeguard.
How DarkThreatX helps
DarkThreatX tracks threat-actor activity, leaked credentials and exposed data across the dark web so security teams can act on early warning. Run a free dark web scan or explore the platform.
