Back Cybersecuritynews

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information

Cybersecuritynews •Tushar Subhra Dutta • February 18, 2026

A sophisticated new malware campaign named ‘CRESCENTHARVEST’ has surfaced, strategically exploiting the geopolitical unrest in Iran to target dissidents and protest supporters. This cyberespionage operation leverages social engineering to deploy a dual-purpose threat capability, functioning as both a remote access trojan (RAT) and an advanced information stealer. The attackers aim to compromise specific targets by […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Crescent Harvest Malware Targets Iranian Protest Supporters A new malware campaign named 'Crescent Harvest' has been identified, targeting supporters of protests in Iran. The malware specifically affects Farsi-speaking users seeking information about the demonstrations, coinciding with an internet blackout in the region. Security experts from Acronis first detected the malware in early January 2026. 10 sources 40

Extracted Entities

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information

The full story

Extracted Entities

Attack Types (2)

Campaigns (1)

Countries (1)