Iranian cyberespionage group known for targeting government, defense technology, military, and diplomacy sectors. Charming Kitten, known by aliases APT35, is now impersonating journalists to approach targets via LinkedIn and WhatsApp and infect their devices with malware. This development is the first time the threat actor is said to have carried out a watering hole attack through WhatsApp and LinkedIn, which also includes making phone calls to victims, Israeli firm Clearsky noted in a Thursday analysis. The group has been previously linked to a series of covert campaigns at least since December 2017 with an aim to steal sensitive information.
Source: https://thehackernews.com/2020/08/hackers-journalist-malware.html